{ "meta": { "schema_version": "1.0.0", "description": "Apeiris knowledge graph \u2014 typed nodes + provenance-carrying edges over the 12 control matrices, 226 sources, framework clauses, and the pinned MITRE ATLAS model. Deterministic; regenerated by tests/build-knowledge-graph.mjs via npm run rehash; checksummed in manifest.json.", "generated_from": [ "12 control matrices", "source_registry.json", "threatcov.json", "atlas/atlas-model.json", "anchors/*.json" ], "atlas_release": "v2026.06", "node_types": [ "AtlasCaseStudy", "AtlasMitigation", "AtlasTactic", "AtlasTechnique", "Control", "Domain", "FrameworkClause", "Lens", "NormativeSource", "Threat" ], "edge_types": [ "addresses", "belongs_to", "cites", "crosswalks_to", "defines", "evidenced_by", "has_lens", "in_tactic", "mapped_to", "mitigated_by" ], "counts": { "nodes": 3329, "edges": 29799, "by_node_type": { "AtlasCaseStudy": 6, "AtlasMitigation": 35, "AtlasTactic": 16, "AtlasTechnique": 173, "Control": 605, "Domain": 12, "FrameworkClause": 2114, "Lens": 23, "NormativeSource": 300, "Threat": 45 }, "by_edge_type": { "addresses": 1068, "belongs_to": 605, "cites": 2700, "crosswalks_to": 16698, "defines": 2008, "evidenced_by": 16, "has_lens": 1330, "in_tactic": 188, "mapped_to": 4939, "mitigated_by": 247 }, "controls": 605, "sources": 300 } }, "nodes": [ { "id": "AML.CS0048", "type": "AtlasCaseStudy", "label": "Exposed ClawdBot Control Interfaces Leads to Credential Access and Execution", "url": "https://atlas.mitre.org/studies/AML.CS0048", "date": "2026-01-25" }, { "id": "AML.CS0049", "type": "AtlasCaseStudy", "label": "Supply Chain Compromise via Poisoned ClawdBot Skill", "url": "https://atlas.mitre.org/studies/AML.CS0049", "date": "2026-01-26" }, { "id": "AML.CS0050", "type": "AtlasCaseStudy", "label": "OpenClaw 1-Click Remote Code Execution", "url": "https://atlas.mitre.org/studies/AML.CS0050", "date": "2026-02-01" }, { "id": "AML.CS0051", "type": "AtlasCaseStudy", "label": "OpenClaw Command & Control via Prompt Injection", "url": "https://atlas.mitre.org/studies/AML.CS0051", "date": "2026-02-03" }, { "id": "AML.CS0059", "type": "AtlasCaseStudy", "label": "EchoLeak: Zero-Click Prompt Injection Targeting M365 Copilot for Data Exfiltration", "url": "https://atlas.mitre.org/studies/AML.CS0059", "date": "2025-05-25" }, { "id": "AML.CS0061", "type": "AtlasCaseStudy", "label": "AI in the Middle: Web-Based AI Services as C2 Relays", "url": "https://atlas.mitre.org/studies/AML.CS0061", "date": "2026-02-17" }, { "id": "AML.M0000", "type": "AtlasMitigation", "label": "Limit Public Release of Information", "url": "https://atlas.mitre.org/mitigations/AML.M0000" }, { "id": "AML.M0001", "type": "AtlasMitigation", "label": "Limit Model Artifact Release", "url": "https://atlas.mitre.org/mitigations/AML.M0001" }, { "id": "AML.M0002", "type": "AtlasMitigation", "label": "Passive AI Output Obfuscation", "url": "https://atlas.mitre.org/mitigations/AML.M0002" }, { "id": "AML.M0003", "type": "AtlasMitigation", "label": "Model Hardening", "url": "https://atlas.mitre.org/mitigations/AML.M0003" }, { "id": "AML.M0004", "type": "AtlasMitigation", "label": "Restrict Number of AI Model Queries", "url": "https://atlas.mitre.org/mitigations/AML.M0004" }, { "id": "AML.M0005", "type": "AtlasMitigation", "label": "Control Access to AI Models and Data at Rest", "url": "https://atlas.mitre.org/mitigations/AML.M0005" }, { "id": "AML.M0006", "type": "AtlasMitigation", "label": "Use Ensemble Methods", "url": "https://atlas.mitre.org/mitigations/AML.M0006" }, { "id": "AML.M0007", "type": "AtlasMitigation", "label": "Sanitize Training Data", "url": "https://atlas.mitre.org/mitigations/AML.M0007" }, { "id": "AML.M0008", "type": "AtlasMitigation", "label": "Validate AI Model", "url": "https://atlas.mitre.org/mitigations/AML.M0008" }, { "id": "AML.M0009", "type": "AtlasMitigation", "label": "Use Multi-Modal Sensors", "url": "https://atlas.mitre.org/mitigations/AML.M0009" }, { "id": "AML.M0010", "type": "AtlasMitigation", "label": "Input Restoration", "url": "https://atlas.mitre.org/mitigations/AML.M0010" }, { "id": "AML.M0011", "type": "AtlasMitigation", "label": "Restrict Library Loading", "url": "https://atlas.mitre.org/mitigations/AML.M0011" }, { "id": "AML.M0012", "type": "AtlasMitigation", "label": "Encrypt Sensitive Information", "url": "https://atlas.mitre.org/mitigations/AML.M0012" }, { "id": "AML.M0013", "type": "AtlasMitigation", "label": "Code Signing", "url": "https://atlas.mitre.org/mitigations/AML.M0013" }, { "id": "AML.M0014", "type": "AtlasMitigation", "label": "Verify AI Artifacts", "url": "https://atlas.mitre.org/mitigations/AML.M0014" }, { "id": "AML.M0015", "type": "AtlasMitigation", "label": "Adversarial Input Detection", "url": "https://atlas.mitre.org/mitigations/AML.M0015" }, { "id": "AML.M0016", "type": "AtlasMitigation", "label": "Vulnerability Scanning", "url": "https://atlas.mitre.org/mitigations/AML.M0016" }, { "id": "AML.M0017", "type": "AtlasMitigation", "label": "AI Model Distribution Methods", "url": "https://atlas.mitre.org/mitigations/AML.M0017" }, { "id": "AML.M0018", "type": "AtlasMitigation", "label": "User Training", "url": "https://atlas.mitre.org/mitigations/AML.M0018" }, { "id": "AML.M0019", "type": "AtlasMitigation", "label": "Control Access to AI Models and Data in Production", "url": "https://atlas.mitre.org/mitigations/AML.M0019" }, { "id": "AML.M0020", "type": "AtlasMitigation", "label": "Generative AI Guardrails", "url": "https://atlas.mitre.org/mitigations/AML.M0020" }, { "id": "AML.M0021", "type": "AtlasMitigation", "label": "Generative AI Guidelines", "url": "https://atlas.mitre.org/mitigations/AML.M0021" }, { "id": "AML.M0022", "type": "AtlasMitigation", "label": "Generative AI Model Alignment", "url": "https://atlas.mitre.org/mitigations/AML.M0022" }, { "id": "AML.M0023", "type": "AtlasMitigation", "label": "AI Bill of Materials", "url": "https://atlas.mitre.org/mitigations/AML.M0023" }, { "id": "AML.M0024", "type": "AtlasMitigation", "label": "AI Telemetry Logging", "url": "https://atlas.mitre.org/mitigations/AML.M0024" }, { "id": "AML.M0025", "type": "AtlasMitigation", "label": "Maintain AI Dataset Provenance", "url": "https://atlas.mitre.org/mitigations/AML.M0025" }, { "id": "AML.M0026", "type": "AtlasMitigation", "label": "Privileged AI Agent Permissions Configuration", "url": "https://atlas.mitre.org/mitigations/AML.M0026" }, { "id": "AML.M0027", "type": "AtlasMitigation", "label": "Single-User AI Agent Permissions Configuration", "url": "https://atlas.mitre.org/mitigations/AML.M0027" }, { "id": "AML.M0028", "type": "AtlasMitigation", "label": "AI Agent Tools Permissions Configuration", "url": "https://atlas.mitre.org/mitigations/AML.M0028" }, { "id": "AML.M0029", "type": "AtlasMitigation", "label": "Human In-the-Loop for AI Agent Actions", "url": "https://atlas.mitre.org/mitigations/AML.M0029" }, { "id": "AML.M0030", "type": "AtlasMitigation", "label": "Restrict AI Agent Tool Invocation on Untrusted Data", "url": "https://atlas.mitre.org/mitigations/AML.M0030" }, { "id": "AML.M0031", "type": "AtlasMitigation", "label": "Memory Hardening", "url": "https://atlas.mitre.org/mitigations/AML.M0031" }, { "id": "AML.M0032", "type": "AtlasMitigation", "label": "Segmentation of AI Agent Components", "url": "https://atlas.mitre.org/mitigations/AML.M0032" }, { "id": "AML.M0033", "type": "AtlasMitigation", "label": "Input and Output Validation for AI Agent Components", "url": "https://atlas.mitre.org/mitigations/AML.M0033" }, { "id": "AML.M0034", "type": "AtlasMitigation", "label": "Deepfake Detection", "url": "https://atlas.mitre.org/mitigations/AML.M0034" }, { "id": "AML.TA0000", "type": "AtlasTactic", "label": "AI Model Access", "url": "https://atlas.mitre.org/tactics/AML.TA0000" }, { "id": "AML.TA0001", "type": "AtlasTactic", "label": "AI Attack Staging", "url": "https://atlas.mitre.org/tactics/AML.TA0001" }, { "id": "AML.TA0002", "type": "AtlasTactic", "label": "Reconnaissance", "url": "https://atlas.mitre.org/tactics/AML.TA0002" }, { "id": "AML.TA0003", "type": "AtlasTactic", "label": "Resource Development", "url": "https://atlas.mitre.org/tactics/AML.TA0003" }, { "id": "AML.TA0004", "type": "AtlasTactic", "label": "Initial Access", "url": "https://atlas.mitre.org/tactics/AML.TA0004" }, { "id": "AML.TA0005", "type": "AtlasTactic", "label": "Execution", "url": "https://atlas.mitre.org/tactics/AML.TA0005" }, { "id": "AML.TA0006", "type": "AtlasTactic", "label": "Persistence", "url": "https://atlas.mitre.org/tactics/AML.TA0006" }, { "id": "AML.TA0007", "type": "AtlasTactic", "label": "Defense Evasion", "url": "https://atlas.mitre.org/tactics/AML.TA0007" }, { "id": "AML.TA0008", "type": "AtlasTactic", "label": "Discovery", "url": "https://atlas.mitre.org/tactics/AML.TA0008" }, { "id": "AML.TA0009", "type": "AtlasTactic", "label": "Collection", "url": "https://atlas.mitre.org/tactics/AML.TA0009" }, { "id": "AML.TA0010", "type": "AtlasTactic", "label": "Exfiltration", "url": "https://atlas.mitre.org/tactics/AML.TA0010" }, { "id": "AML.TA0011", "type": "AtlasTactic", "label": "Impact", "url": "https://atlas.mitre.org/tactics/AML.TA0011" }, { "id": "AML.TA0012", "type": "AtlasTactic", "label": "Privilege Escalation", "url": "https://atlas.mitre.org/tactics/AML.TA0012" }, { "id": "AML.TA0013", "type": "AtlasTactic", "label": "Credential Access", "url": "https://atlas.mitre.org/tactics/AML.TA0013" }, { "id": "AML.TA0014", "type": "AtlasTactic", "label": "Command and Control", "url": "https://atlas.mitre.org/tactics/AML.TA0014" }, { "id": "AML.TA0015", "type": "AtlasTactic", "label": "Lateral Movement", "url": "https://atlas.mitre.org/tactics/AML.TA0015" }, { "id": "AML.T0000", "type": "AtlasTechnique", "label": "Search Open Technical Databases", "url": "https://atlas.mitre.org/techniques/AML.T0000", "is_subtechnique": false }, { "id": "AML.T0000.000", "type": "AtlasTechnique", "label": "Journals and Conference Proceedings", "url": "https://atlas.mitre.org/techniques/AML.T0000.000", "is_subtechnique": true }, { "id": "AML.T0000.001", "type": "AtlasTechnique", "label": "Pre-Print Repositories", "url": "https://atlas.mitre.org/techniques/AML.T0000.001", "is_subtechnique": true }, { "id": "AML.T0000.002", "type": "AtlasTechnique", "label": "Technical Blogs", "url": "https://atlas.mitre.org/techniques/AML.T0000.002", "is_subtechnique": true }, { "id": "AML.T0001", "type": "AtlasTechnique", "label": "Search Open AI Vulnerability Analysis", "url": "https://atlas.mitre.org/techniques/AML.T0001", "is_subtechnique": false }, { "id": "AML.T0002", "type": "AtlasTechnique", "label": "Acquire Public AI Artifacts", "url": "https://atlas.mitre.org/techniques/AML.T0002", "is_subtechnique": false }, { "id": "AML.T0002.000", "type": "AtlasTechnique", "label": "Datasets", "url": "https://atlas.mitre.org/techniques/AML.T0002.000", "is_subtechnique": true }, { "id": "AML.T0002.001", "type": "AtlasTechnique", "label": "Models", "url": "https://atlas.mitre.org/techniques/AML.T0002.001", "is_subtechnique": true }, { "id": "AML.T0002.002", "type": "AtlasTechnique", "label": "AI Agent Configuration", "url": "https://atlas.mitre.org/techniques/AML.T0002.002", "is_subtechnique": true }, { "id": "AML.T0003", "type": "AtlasTechnique", "label": "Search Victim-Owned Websites", "url": "https://atlas.mitre.org/techniques/AML.T0003", "is_subtechnique": false }, { "id": "AML.T0004", "type": "AtlasTechnique", "label": "Search Application Repositories", "url": "https://atlas.mitre.org/techniques/AML.T0004", "is_subtechnique": false }, { "id": "AML.T0005", "type": "AtlasTechnique", "label": "Create Proxy AI Model", "url": "https://atlas.mitre.org/techniques/AML.T0005", "is_subtechnique": false }, { "id": "AML.T0005.000", "type": "AtlasTechnique", "label": "Train Proxy via Gathered AI Artifacts", "url": "https://atlas.mitre.org/techniques/AML.T0005.000", "is_subtechnique": true }, { "id": "AML.T0005.001", "type": "AtlasTechnique", "label": "Train Proxy via Replication", "url": "https://atlas.mitre.org/techniques/AML.T0005.001", "is_subtechnique": true }, { "id": "AML.T0005.002", "type": "AtlasTechnique", "label": "Use Pre-Trained Model", "url": "https://atlas.mitre.org/techniques/AML.T0005.002", "is_subtechnique": true }, { "id": "AML.T0006", "type": "AtlasTechnique", "label": "Active Scanning", "url": "https://atlas.mitre.org/techniques/AML.T0006", "is_subtechnique": false }, { "id": "AML.T0007", "type": "AtlasTechnique", "label": "Discover AI Artifacts", "url": "https://atlas.mitre.org/techniques/AML.T0007", "is_subtechnique": false }, { "id": "AML.T0008", "type": "AtlasTechnique", "label": "Acquire Infrastructure", "url": "https://atlas.mitre.org/techniques/AML.T0008", "is_subtechnique": false }, { "id": "AML.T0008.000", "type": "AtlasTechnique", "label": "AI Development Workspaces", "url": "https://atlas.mitre.org/techniques/AML.T0008.000", "is_subtechnique": true }, { "id": "AML.T0008.001", "type": "AtlasTechnique", "label": "Consumer Hardware", "url": "https://atlas.mitre.org/techniques/AML.T0008.001", "is_subtechnique": true }, { "id": "AML.T0008.002", "type": "AtlasTechnique", "label": "Domains", "url": "https://atlas.mitre.org/techniques/AML.T0008.002", "is_subtechnique": true }, { "id": "AML.T0008.003", "type": "AtlasTechnique", "label": "Physical Countermeasures", "url": "https://atlas.mitre.org/techniques/AML.T0008.003", "is_subtechnique": true }, { "id": "AML.T0008.004", "type": "AtlasTechnique", "label": "Serverless", "url": "https://atlas.mitre.org/techniques/AML.T0008.004", "is_subtechnique": true }, { "id": "AML.T0008.005", "type": "AtlasTechnique", "label": "AI Service Proxies", "url": "https://atlas.mitre.org/techniques/AML.T0008.005", "is_subtechnique": true }, { "id": "AML.T0010", "type": "AtlasTechnique", "label": "AI Supply Chain Compromise", "url": "https://atlas.mitre.org/techniques/AML.T0010", "is_subtechnique": false }, { "id": "AML.T0010.000", "type": "AtlasTechnique", "label": "Hardware", "url": "https://atlas.mitre.org/techniques/AML.T0010.000", "is_subtechnique": true }, { "id": "AML.T0010.001", "type": "AtlasTechnique", "label": "AI Software", "url": "https://atlas.mitre.org/techniques/AML.T0010.001", "is_subtechnique": true }, { "id": "AML.T0010.002", "type": "AtlasTechnique", "label": "Data", "url": "https://atlas.mitre.org/techniques/AML.T0010.002", "is_subtechnique": true }, { "id": "AML.T0010.003", "type": "AtlasTechnique", "label": "Model", "url": "https://atlas.mitre.org/techniques/AML.T0010.003", "is_subtechnique": true }, { "id": "AML.T0010.004", "type": "AtlasTechnique", "label": "Container Registry", "url": "https://atlas.mitre.org/techniques/AML.T0010.004", "is_subtechnique": true }, { "id": "AML.T0010.005", "type": "AtlasTechnique", "label": "AI Agent Tool", "url": "https://atlas.mitre.org/techniques/AML.T0010.005", "is_subtechnique": true }, { "id": "AML.T0011", "type": "AtlasTechnique", "label": "User Execution", "url": "https://atlas.mitre.org/techniques/AML.T0011", "is_subtechnique": false }, { "id": "AML.T0011.000", "type": "AtlasTechnique", "label": "Unsafe AI Artifacts", "url": "https://atlas.mitre.org/techniques/AML.T0011.000", "is_subtechnique": true }, { "id": "AML.T0011.001", "type": "AtlasTechnique", "label": "Malicious Package", "url": "https://atlas.mitre.org/techniques/AML.T0011.001", "is_subtechnique": true }, { "id": "AML.T0011.002", "type": "AtlasTechnique", "label": "Poisoned AI Agent Tool", "url": "https://atlas.mitre.org/techniques/AML.T0011.002", "is_subtechnique": true }, { "id": "AML.T0011.003", "type": "AtlasTechnique", "label": "Malicious Link", "url": "https://atlas.mitre.org/techniques/AML.T0011.003", "is_subtechnique": true }, { "id": "AML.T0012", "type": "AtlasTechnique", "label": "Valid Accounts", "url": "https://atlas.mitre.org/techniques/AML.T0012", "is_subtechnique": false }, { "id": "AML.T0013", "type": "AtlasTechnique", "label": "Discover AI Model Ontology", "url": "https://atlas.mitre.org/techniques/AML.T0013", "is_subtechnique": false }, { "id": "AML.T0014", "type": "AtlasTechnique", "label": "Discover AI Model Family", "url": "https://atlas.mitre.org/techniques/AML.T0014", "is_subtechnique": false }, { "id": "AML.T0015", "type": "AtlasTechnique", "label": "Evade AI Model", "url": "https://atlas.mitre.org/techniques/AML.T0015", "is_subtechnique": false }, { "id": "AML.T0016", "type": "AtlasTechnique", "label": "Obtain Capabilities", "url": "https://atlas.mitre.org/techniques/AML.T0016", "is_subtechnique": false }, { "id": "AML.T0016.000", "type": "AtlasTechnique", "label": "Adversarial AI Attack Implementations", "url": "https://atlas.mitre.org/techniques/AML.T0016.000", "is_subtechnique": true }, { "id": "AML.T0016.001", "type": "AtlasTechnique", "label": "Software Tools", "url": "https://atlas.mitre.org/techniques/AML.T0016.001", "is_subtechnique": true }, { "id": "AML.T0016.002", "type": "AtlasTechnique", "label": "Generative AI", "url": "https://atlas.mitre.org/techniques/AML.T0016.002", "is_subtechnique": true }, { "id": "AML.T0017", "type": "AtlasTechnique", "label": "Develop Capabilities", "url": "https://atlas.mitre.org/techniques/AML.T0017", "is_subtechnique": false }, { "id": "AML.T0017.000", "type": "AtlasTechnique", "label": "Adversarial AI Attacks", "url": "https://atlas.mitre.org/techniques/AML.T0017.000", "is_subtechnique": true }, { "id": "AML.T0018", "type": "AtlasTechnique", "label": "Manipulate AI Model", "url": "https://atlas.mitre.org/techniques/AML.T0018", "is_subtechnique": false }, { "id": "AML.T0018.000", "type": "AtlasTechnique", "label": "Poison AI Model", "url": "https://atlas.mitre.org/techniques/AML.T0018.000", "is_subtechnique": true }, { "id": "AML.T0018.001", "type": "AtlasTechnique", "label": "Modify AI Model Architecture", "url": "https://atlas.mitre.org/techniques/AML.T0018.001", "is_subtechnique": true }, { "id": "AML.T0018.002", "type": "AtlasTechnique", "label": "Embed Malware", "url": "https://atlas.mitre.org/techniques/AML.T0018.002", "is_subtechnique": true }, { "id": "AML.T0019", "type": "AtlasTechnique", "label": "Publish Poisoned Datasets", "url": "https://atlas.mitre.org/techniques/AML.T0019", "is_subtechnique": false }, { "id": "AML.T0020", "type": "AtlasTechnique", "label": "Poison Training Data", "url": "https://atlas.mitre.org/techniques/AML.T0020", "is_subtechnique": false }, { "id": "AML.T0021", "type": "AtlasTechnique", "label": "Establish Accounts", "url": "https://atlas.mitre.org/techniques/AML.T0021", "is_subtechnique": false }, { "id": "AML.T0024", "type": "AtlasTechnique", "label": "Exfiltration via AI Inference API", "url": "https://atlas.mitre.org/techniques/AML.T0024", "is_subtechnique": false }, { "id": "AML.T0024.000", "type": "AtlasTechnique", "label": "Infer Training Data Membership", "url": "https://atlas.mitre.org/techniques/AML.T0024.000", "is_subtechnique": true }, { "id": "AML.T0024.001", "type": "AtlasTechnique", "label": "Invert AI Model", "url": "https://atlas.mitre.org/techniques/AML.T0024.001", "is_subtechnique": true }, { "id": "AML.T0024.002", "type": "AtlasTechnique", "label": "Extract AI Model", "url": "https://atlas.mitre.org/techniques/AML.T0024.002", "is_subtechnique": true }, { "id": "AML.T0025", "type": "AtlasTechnique", "label": "Exfiltration via Cyber Means", "url": "https://atlas.mitre.org/techniques/AML.T0025", "is_subtechnique": false }, { "id": "AML.T0029", "type": "AtlasTechnique", "label": "Denial of AI Service", "url": "https://atlas.mitre.org/techniques/AML.T0029", "is_subtechnique": false }, { "id": "AML.T0031", "type": "AtlasTechnique", "label": "Erode AI Model Integrity", "url": "https://atlas.mitre.org/techniques/AML.T0031", "is_subtechnique": false }, { "id": "AML.T0034", "type": "AtlasTechnique", "label": "Cost Harvesting", "url": "https://atlas.mitre.org/techniques/AML.T0034", "is_subtechnique": false }, { "id": "AML.T0034.000", "type": "AtlasTechnique", "label": "Excessive Queries", "url": "https://atlas.mitre.org/techniques/AML.T0034.000", "is_subtechnique": true }, { "id": "AML.T0034.001", "type": "AtlasTechnique", "label": "Resource-Intensive Queries", "url": "https://atlas.mitre.org/techniques/AML.T0034.001", "is_subtechnique": true }, { "id": "AML.T0034.002", "type": "AtlasTechnique", "label": "Agentic Resource Consumption", "url": "https://atlas.mitre.org/techniques/AML.T0034.002", "is_subtechnique": true }, { "id": "AML.T0035", "type": "AtlasTechnique", "label": "AI Artifact Collection", "url": "https://atlas.mitre.org/techniques/AML.T0035", "is_subtechnique": false }, { "id": "AML.T0036", "type": "AtlasTechnique", "label": "Data from Information Repositories", "url": "https://atlas.mitre.org/techniques/AML.T0036", "is_subtechnique": false }, { "id": "AML.T0037", "type": "AtlasTechnique", "label": "Data from Local System", "url": "https://atlas.mitre.org/techniques/AML.T0037", "is_subtechnique": false }, { "id": "AML.T0040", "type": "AtlasTechnique", "label": "AI Model Inference API Access", "url": "https://atlas.mitre.org/techniques/AML.T0040", "is_subtechnique": false }, { "id": "AML.T0041", "type": "AtlasTechnique", "label": "Physical Environment Access", "url": "https://atlas.mitre.org/techniques/AML.T0041", "is_subtechnique": false }, { "id": "AML.T0042", "type": "AtlasTechnique", "label": "Verify Attack", "url": "https://atlas.mitre.org/techniques/AML.T0042", "is_subtechnique": false }, { "id": "AML.T0043", "type": "AtlasTechnique", "label": "Craft Adversarial Data", "url": "https://atlas.mitre.org/techniques/AML.T0043", "is_subtechnique": false }, { "id": "AML.T0043.000", "type": "AtlasTechnique", "label": "White-Box Optimization", "url": "https://atlas.mitre.org/techniques/AML.T0043.000", "is_subtechnique": true }, { "id": "AML.T0043.001", "type": "AtlasTechnique", "label": "Black-Box Optimization", "url": "https://atlas.mitre.org/techniques/AML.T0043.001", "is_subtechnique": true }, { "id": "AML.T0043.002", "type": "AtlasTechnique", "label": "Black-Box Transfer", "url": "https://atlas.mitre.org/techniques/AML.T0043.002", "is_subtechnique": true }, { "id": "AML.T0043.003", "type": "AtlasTechnique", "label": "Manual Modification", "url": "https://atlas.mitre.org/techniques/AML.T0043.003", "is_subtechnique": true }, { "id": "AML.T0043.004", "type": "AtlasTechnique", "label": "Insert Backdoor Trigger", "url": "https://atlas.mitre.org/techniques/AML.T0043.004", "is_subtechnique": true }, { "id": "AML.T0044", "type": "AtlasTechnique", "label": "Full AI Model Access", "url": "https://atlas.mitre.org/techniques/AML.T0044", "is_subtechnique": false }, { "id": "AML.T0046", "type": "AtlasTechnique", "label": "Spamming AI System with Chaff Data", "url": "https://atlas.mitre.org/techniques/AML.T0046", "is_subtechnique": false }, { "id": "AML.T0047", "type": "AtlasTechnique", "label": "AI-Enabled Product or Service", "url": "https://atlas.mitre.org/techniques/AML.T0047", "is_subtechnique": false }, { "id": "AML.T0048", "type": "AtlasTechnique", "label": "External Harms", "url": "https://atlas.mitre.org/techniques/AML.T0048", "is_subtechnique": false }, { "id": "AML.T0048.000", "type": "AtlasTechnique", "label": "Financial Harm", "url": "https://atlas.mitre.org/techniques/AML.T0048.000", "is_subtechnique": true }, { "id": "AML.T0048.001", "type": "AtlasTechnique", "label": "Reputational Harm", "url": "https://atlas.mitre.org/techniques/AML.T0048.001", "is_subtechnique": true }, { "id": "AML.T0048.002", "type": "AtlasTechnique", "label": "Societal Harm", "url": "https://atlas.mitre.org/techniques/AML.T0048.002", "is_subtechnique": true }, { "id": "AML.T0048.003", "type": "AtlasTechnique", "label": "User Harm", "url": "https://atlas.mitre.org/techniques/AML.T0048.003", "is_subtechnique": true }, { "id": "AML.T0048.004", "type": "AtlasTechnique", "label": "AI Intellectual Property Theft", "url": "https://atlas.mitre.org/techniques/AML.T0048.004", "is_subtechnique": true }, { "id": "AML.T0049", "type": "AtlasTechnique", "label": "Exploit Public-Facing Application", "url": "https://atlas.mitre.org/techniques/AML.T0049", "is_subtechnique": false }, { "id": "AML.T0050", "type": "AtlasTechnique", "label": "Command and Scripting Interpreter", "url": "https://atlas.mitre.org/techniques/AML.T0050", "is_subtechnique": false }, { "id": "AML.T0051", "type": "AtlasTechnique", "label": "LLM Prompt Injection", "url": "https://atlas.mitre.org/techniques/AML.T0051", "is_subtechnique": false }, { "id": "AML.T0051.000", "type": "AtlasTechnique", "label": "Direct", "url": "https://atlas.mitre.org/techniques/AML.T0051.000", "is_subtechnique": true }, { "id": "AML.T0051.001", "type": "AtlasTechnique", "label": "Indirect", "url": "https://atlas.mitre.org/techniques/AML.T0051.001", "is_subtechnique": true }, { "id": "AML.T0051.002", "type": "AtlasTechnique", "label": "Triggered", "url": "https://atlas.mitre.org/techniques/AML.T0051.002", "is_subtechnique": true }, { "id": "AML.T0052", "type": "AtlasTechnique", "label": "Phishing", "url": "https://atlas.mitre.org/techniques/AML.T0052", "is_subtechnique": false }, { "id": "AML.T0052.000", "type": "AtlasTechnique", "label": "Spearphishing via Social Engineering LLM", "url": "https://atlas.mitre.org/techniques/AML.T0052.000", "is_subtechnique": true }, { "id": "AML.T0052.001", "type": "AtlasTechnique", "label": "Deepfake-Assisted Phishing", "url": "https://atlas.mitre.org/techniques/AML.T0052.001", "is_subtechnique": true }, { "id": "AML.T0053", "type": "AtlasTechnique", "label": "AI Agent Tool Invocation", "url": "https://atlas.mitre.org/techniques/AML.T0053", "is_subtechnique": false }, { "id": "AML.T0054", "type": "AtlasTechnique", "label": "LLM Jailbreak", "url": "https://atlas.mitre.org/techniques/AML.T0054", "is_subtechnique": false }, { "id": "AML.T0055", "type": "AtlasTechnique", "label": "Unsecured Credentials", "url": "https://atlas.mitre.org/techniques/AML.T0055", "is_subtechnique": false }, { "id": "AML.T0056", "type": "AtlasTechnique", "label": "Extract LLM System Prompt", "url": "https://atlas.mitre.org/techniques/AML.T0056", "is_subtechnique": false }, { "id": "AML.T0057", "type": "AtlasTechnique", "label": "LLM Data Leakage", "url": "https://atlas.mitre.org/techniques/AML.T0057", "is_subtechnique": false }, { "id": "AML.T0058", "type": "AtlasTechnique", "label": "Publish Poisoned Models", "url": "https://atlas.mitre.org/techniques/AML.T0058", "is_subtechnique": false }, { "id": "AML.T0059", "type": "AtlasTechnique", "label": "Erode Dataset Integrity", "url": "https://atlas.mitre.org/techniques/AML.T0059", "is_subtechnique": false }, { "id": "AML.T0060", "type": "AtlasTechnique", "label": "Publish Hallucinated Entities", "url": "https://atlas.mitre.org/techniques/AML.T0060", "is_subtechnique": false }, { "id": "AML.T0061", "type": "AtlasTechnique", "label": "LLM Prompt Self-Replication", "url": "https://atlas.mitre.org/techniques/AML.T0061", "is_subtechnique": false }, { "id": "AML.T0062", "type": "AtlasTechnique", "label": "Discover LLM Hallucinations", "url": "https://atlas.mitre.org/techniques/AML.T0062", "is_subtechnique": false }, { "id": "AML.T0063", "type": "AtlasTechnique", "label": "Discover AI Model Outputs", "url": "https://atlas.mitre.org/techniques/AML.T0063", "is_subtechnique": false }, { "id": "AML.T0064", "type": "AtlasTechnique", "label": "Gather RAG-Indexed Targets", "url": "https://atlas.mitre.org/techniques/AML.T0064", "is_subtechnique": false }, { "id": "AML.T0065", "type": "AtlasTechnique", "label": "LLM Prompt Crafting", "url": "https://atlas.mitre.org/techniques/AML.T0065", "is_subtechnique": false }, { "id": "AML.T0066", "type": "AtlasTechnique", "label": "Retrieval Content Crafting", "url": "https://atlas.mitre.org/techniques/AML.T0066", "is_subtechnique": false }, { "id": "AML.T0067", "type": "AtlasTechnique", "label": "LLM Trusted Output Components Manipulation", "url": "https://atlas.mitre.org/techniques/AML.T0067", "is_subtechnique": false }, { "id": "AML.T0067.000", "type": "AtlasTechnique", "label": "Citations", "url": "https://atlas.mitre.org/techniques/AML.T0067.000", "is_subtechnique": true }, { "id": "AML.T0068", "type": "AtlasTechnique", "label": "LLM Prompt Obfuscation", "url": "https://atlas.mitre.org/techniques/AML.T0068", "is_subtechnique": false }, { "id": "AML.T0069", "type": "AtlasTechnique", "label": "Discover LLM System Information", "url": "https://atlas.mitre.org/techniques/AML.T0069", "is_subtechnique": false }, { "id": "AML.T0069.000", "type": "AtlasTechnique", "label": "Special Character Sets", "url": "https://atlas.mitre.org/techniques/AML.T0069.000", "is_subtechnique": true }, { "id": "AML.T0069.001", "type": "AtlasTechnique", "label": "System Instruction Keywords", "url": "https://atlas.mitre.org/techniques/AML.T0069.001", "is_subtechnique": true }, { "id": "AML.T0069.002", "type": "AtlasTechnique", "label": "System Prompt", "url": "https://atlas.mitre.org/techniques/AML.T0069.002", "is_subtechnique": true }, { "id": "AML.T0070", "type": "AtlasTechnique", "label": "RAG Poisoning", "url": "https://atlas.mitre.org/techniques/AML.T0070", "is_subtechnique": false }, { "id": "AML.T0071", "type": "AtlasTechnique", "label": "False RAG Entry Injection", "url": "https://atlas.mitre.org/techniques/AML.T0071", "is_subtechnique": false }, { "id": "AML.T0072", "type": "AtlasTechnique", "label": "Reverse Shell", "url": "https://atlas.mitre.org/techniques/AML.T0072", "is_subtechnique": false }, { "id": "AML.T0073", "type": "AtlasTechnique", "label": "Impersonation", "url": "https://atlas.mitre.org/techniques/AML.T0073", "is_subtechnique": false }, { "id": "AML.T0074", "type": "AtlasTechnique", "label": "Masquerading", "url": "https://atlas.mitre.org/techniques/AML.T0074", "is_subtechnique": false }, { "id": "AML.T0075", "type": "AtlasTechnique", "label": "Cloud Service Discovery", "url": "https://atlas.mitre.org/techniques/AML.T0075", "is_subtechnique": false }, { "id": "AML.T0076", "type": "AtlasTechnique", "label": "Corrupt AI Model", "url": "https://atlas.mitre.org/techniques/AML.T0076", "is_subtechnique": false }, { "id": "AML.T0077", "type": "AtlasTechnique", "label": "LLM Response Rendering", "url": "https://atlas.mitre.org/techniques/AML.T0077", "is_subtechnique": false }, { "id": "AML.T0078", "type": "AtlasTechnique", "label": "Drive-by Compromise", "url": "https://atlas.mitre.org/techniques/AML.T0078", "is_subtechnique": false }, { "id": "AML.T0079", "type": "AtlasTechnique", "label": "Stage Capabilities", "url": "https://atlas.mitre.org/techniques/AML.T0079", "is_subtechnique": false }, { "id": "AML.T0080", "type": "AtlasTechnique", "label": "AI Agent Context Poisoning", "url": "https://atlas.mitre.org/techniques/AML.T0080", "is_subtechnique": false }, { "id": "AML.T0080.000", "type": "AtlasTechnique", "label": "Memory", "url": "https://atlas.mitre.org/techniques/AML.T0080.000", "is_subtechnique": true }, { "id": "AML.T0080.001", "type": "AtlasTechnique", "label": "Thread", "url": "https://atlas.mitre.org/techniques/AML.T0080.001", "is_subtechnique": true }, { "id": "AML.T0081", "type": "AtlasTechnique", "label": "Modify AI Agent Configuration", "url": "https://atlas.mitre.org/techniques/AML.T0081", "is_subtechnique": false }, { "id": "AML.T0082", "type": "AtlasTechnique", "label": "RAG Credential Harvesting", "url": "https://atlas.mitre.org/techniques/AML.T0082", "is_subtechnique": false }, { "id": "AML.T0083", "type": "AtlasTechnique", "label": "Credentials from AI Agent Configuration", "url": "https://atlas.mitre.org/techniques/AML.T0083", "is_subtechnique": false }, { "id": "AML.T0084", "type": "AtlasTechnique", "label": "Discover AI Agent Configuration", "url": "https://atlas.mitre.org/techniques/AML.T0084", "is_subtechnique": false }, { "id": "AML.T0084.000", "type": "AtlasTechnique", "label": "Embedded Knowledge", "url": "https://atlas.mitre.org/techniques/AML.T0084.000", "is_subtechnique": true }, { "id": "AML.T0084.001", "type": "AtlasTechnique", "label": "Tool Definitions", "url": "https://atlas.mitre.org/techniques/AML.T0084.001", "is_subtechnique": true }, { "id": "AML.T0084.002", "type": "AtlasTechnique", "label": "Activation Triggers", "url": "https://atlas.mitre.org/techniques/AML.T0084.002", "is_subtechnique": true }, { "id": "AML.T0084.003", "type": "AtlasTechnique", "label": "Call Chains", "url": "https://atlas.mitre.org/techniques/AML.T0084.003", "is_subtechnique": true }, { "id": "AML.T0085", "type": "AtlasTechnique", "label": "Data from AI Services", "url": "https://atlas.mitre.org/techniques/AML.T0085", "is_subtechnique": false }, { "id": "AML.T0085.000", "type": "AtlasTechnique", "label": "RAG Databases", "url": "https://atlas.mitre.org/techniques/AML.T0085.000", "is_subtechnique": true }, { "id": "AML.T0085.001", "type": "AtlasTechnique", "label": "AI Agent Tools", "url": "https://atlas.mitre.org/techniques/AML.T0085.001", "is_subtechnique": true }, { "id": "AML.T0086", "type": "AtlasTechnique", "label": "Exfiltration via AI Agent Tool Invocation", "url": "https://atlas.mitre.org/techniques/AML.T0086", "is_subtechnique": false }, { "id": "AML.T0087", "type": "AtlasTechnique", "label": "Gather Victim Identity Information", "url": "https://atlas.mitre.org/techniques/AML.T0087", "is_subtechnique": false }, { "id": "AML.T0088", "type": "AtlasTechnique", "label": "Generate Deepfakes", "url": "https://atlas.mitre.org/techniques/AML.T0088", "is_subtechnique": false }, { "id": "AML.T0089", "type": "AtlasTechnique", "label": "Process Discovery", "url": "https://atlas.mitre.org/techniques/AML.T0089", "is_subtechnique": false }, { "id": "AML.T0090", "type": "AtlasTechnique", "label": "OS Credential Dumping", "url": "https://atlas.mitre.org/techniques/AML.T0090", "is_subtechnique": false }, { "id": "AML.T0091", "type": "AtlasTechnique", "label": "Use Alternate Authentication Material", "url": "https://atlas.mitre.org/techniques/AML.T0091", "is_subtechnique": false }, { "id": "AML.T0091.000", "type": "AtlasTechnique", "label": "Application Access Token", "url": "https://atlas.mitre.org/techniques/AML.T0091.000", "is_subtechnique": true }, { "id": "AML.T0091.001", "type": "AtlasTechnique", "label": "Web Session Cookie", "url": "https://atlas.mitre.org/techniques/AML.T0091.001", "is_subtechnique": true }, { "id": "AML.T0092", "type": "AtlasTechnique", "label": "Manipulate User LLM Chat History", "url": "https://atlas.mitre.org/techniques/AML.T0092", "is_subtechnique": false }, { "id": "AML.T0093", "type": "AtlasTechnique", "label": "Prompt Infiltration via Public-Facing Application", "url": "https://atlas.mitre.org/techniques/AML.T0093", "is_subtechnique": false }, { "id": "AML.T0094", "type": "AtlasTechnique", "label": "Delay Execution of LLM Instructions", "url": "https://atlas.mitre.org/techniques/AML.T0094", "is_subtechnique": false }, { "id": "AML.T0095", "type": "AtlasTechnique", "label": "Search Open Websites/Domains", "url": "https://atlas.mitre.org/techniques/AML.T0095", "is_subtechnique": false }, { "id": "AML.T0095.000", "type": "AtlasTechnique", "label": "Code Repositories", "url": "https://atlas.mitre.org/techniques/AML.T0095.000", "is_subtechnique": true }, { "id": "AML.T0096", "type": "AtlasTechnique", "label": "AI Service API", "url": "https://atlas.mitre.org/techniques/AML.T0096", "is_subtechnique": false }, { "id": "AML.T0097", "type": "AtlasTechnique", "label": "Virtualization/Sandbox Evasion", "url": "https://atlas.mitre.org/techniques/AML.T0097", "is_subtechnique": false }, { "id": "AML.T0098", "type": "AtlasTechnique", "label": "AI Agent Tool Credential Harvesting", "url": "https://atlas.mitre.org/techniques/AML.T0098", "is_subtechnique": false }, { "id": "AML.T0099", "type": "AtlasTechnique", "label": "AI Agent Tool Data Poisoning", "url": "https://atlas.mitre.org/techniques/AML.T0099", "is_subtechnique": false }, { "id": "AML.T0100", "type": "AtlasTechnique", "label": "AI Agent Clickbait", "url": "https://atlas.mitre.org/techniques/AML.T0100", "is_subtechnique": false }, { "id": "AML.T0101", "type": "AtlasTechnique", "label": "Data Destruction via AI Agent Tool Invocation", "url": "https://atlas.mitre.org/techniques/AML.T0101", "is_subtechnique": false }, { "id": "AML.T0102", "type": "AtlasTechnique", "label": "Generate Malicious Commands", "url": "https://atlas.mitre.org/techniques/AML.T0102", "is_subtechnique": false }, { "id": "AML.T0103", "type": "AtlasTechnique", "label": "Deploy AI Agent", "url": "https://atlas.mitre.org/techniques/AML.T0103", "is_subtechnique": false }, { "id": "AML.T0104", "type": "AtlasTechnique", "label": "Publish Poisoned AI Agent Tool", "url": "https://atlas.mitre.org/techniques/AML.T0104", "is_subtechnique": false }, { "id": "AML.T0105", "type": "AtlasTechnique", "label": "Escape to Host", "url": "https://atlas.mitre.org/techniques/AML.T0105", "is_subtechnique": false }, { "id": "AML.T0106", "type": "AtlasTechnique", "label": "Exploitation for Credential Access", "url": "https://atlas.mitre.org/techniques/AML.T0106", "is_subtechnique": false }, { "id": "AML.T0107", "type": "AtlasTechnique", "label": "Exploitation for Defense Evasion", "url": "https://atlas.mitre.org/techniques/AML.T0107", "is_subtechnique": false }, { "id": "AML.T0108", "type": "AtlasTechnique", "label": "AI Agent", "url": "https://atlas.mitre.org/techniques/AML.T0108", "is_subtechnique": false }, { "id": "AML.T0109", "type": "AtlasTechnique", "label": "AI Supply Chain Rug Pull", "url": "https://atlas.mitre.org/techniques/AML.T0109", "is_subtechnique": false }, { "id": "AML.T0110", "type": "AtlasTechnique", "label": "AI Agent Tool Poisoning", "url": "https://atlas.mitre.org/techniques/AML.T0110", "is_subtechnique": false }, { "id": "AML.T0111", "type": "AtlasTechnique", "label": "AI Supply Chain Reputation Inflation", "url": "https://atlas.mitre.org/techniques/AML.T0111", "is_subtechnique": false }, { "id": "AML.T0112", "type": "AtlasTechnique", "label": "Machine Compromise", "url": "https://atlas.mitre.org/techniques/AML.T0112", "is_subtechnique": false }, { "id": "AML.T0112.000", "type": "AtlasTechnique", "label": "Local AI Agent", "url": "https://atlas.mitre.org/techniques/AML.T0112.000", "is_subtechnique": true }, { "id": "AML.T0112.001", "type": "AtlasTechnique", "label": "AI Artifacts", "url": "https://atlas.mitre.org/techniques/AML.T0112.001", "is_subtechnique": true }, { "id": "AML.T0113", "type": "AtlasTechnique", "label": "Steal Web Session Cookie", "url": "https://atlas.mitre.org/techniques/AML.T0113", "is_subtechnique": false }, { "id": "AML.T0114", "type": "AtlasTechnique", "label": "AI Service Web Interface", "url": "https://atlas.mitre.org/techniques/AML.T0114", "is_subtechnique": false }, { "id": "control:agentic/AA-01", "type": "Control", "label": "Agent Identity Presentation at Tool Invocation", "canonical_id": "apeiris://agentic/controls/AA-01", "control_id": "AA-01", "layer": "AA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AA-02", "type": "Control", "label": "API Key and Bearer Token Lifecycle Management", "canonical_id": "apeiris://agentic/controls/AA-02", "control_id": "AA-02", "layer": "AA", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AA-03", "type": "Control", "label": "mTLS and Certificate-Based Agent Authentication", "canonical_id": "apeiris://agentic/controls/AA-03", "control_id": "AA-03", "layer": "AA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AA-04", "type": "Control", "label": "Workload Identity for Agent Processes", "canonical_id": "apeiris://agentic/controls/AA-04", "control_id": "AA-04", "layer": "AA", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AA-05", "type": "Control", "label": "Session Token Binding and Anti-Replay Controls", "canonical_id": "apeiris://agentic/controls/AA-05", "control_id": "AA-05", "layer": "AA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AA-06", "type": "Control", "label": "Cross-System Authentication Chaining", "canonical_id": "apeiris://agentic/controls/AA-06", "control_id": "AA-06", "layer": "AA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AA-07", "type": "Control", "label": "Authentication Failure Monitoring and Alerting", "canonical_id": "apeiris://agentic/controls/AA-07", "control_id": "AA-07", "layer": "AA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AA-08", "type": "Control", "label": "Agent Authentication Evidence Package", "canonical_id": "apeiris://agentic/controls/AA-08", "control_id": "AA-08", "layer": "AA", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AB-01", "type": "Control", "label": "Authorized Action Scope Manifest", "canonical_id": "apeiris://agentic/controls/AB-01", "control_id": "AB-01", "layer": "AB", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AB-02", "type": "Control", "label": "Tool-Call Authorization Policy", "canonical_id": "apeiris://agentic/controls/AB-02", "control_id": "AB-02", "layer": "AB", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AB-03", "type": "Control", "label": "Action Reversibility Classification and Gates", "canonical_id": "apeiris://agentic/controls/AB-03", "control_id": "AB-03", "layer": "AB", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AB-04", "type": "Control", "label": "Output Policy Enforcement", "canonical_id": "apeiris://agentic/controls/AB-04", "control_id": "AB-04", "layer": "AB", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AB-05", "type": "Control", "label": "Prompt Injection Detection and Defense", "canonical_id": "apeiris://agentic/controls/AB-05", "control_id": "AB-05", "layer": "AB", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AB-06", "type": "Control", "label": "Rate Limiting and Resource Budget Enforcement", "canonical_id": "apeiris://agentic/controls/AB-06", "control_id": "AB-06", "layer": "AB", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AB-07", "type": "Control", "label": "Behavioral Drift Monitoring", "canonical_id": "apeiris://agentic/controls/AB-07", "control_id": "AB-07", "layer": "AB", "blocking_effect": "requires-review" }, { "id": "control:agentic/AB-08", "type": "Control", "label": "BehavioralAttestation Production", "canonical_id": "apeiris://agentic/controls/AB-08", "control_id": "AB-08", "layer": "AB", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AB-09", "type": "Control", "label": "Comprehensive Input Validation and Multimodal Screening", "canonical_id": "apeiris://agentic/controls/AB-09", "control_id": "AB-09", "layer": "AB", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AG-01", "type": "Control", "label": "Agentic AI Governance Structure", "canonical_id": "apeiris://agentic/controls/AG-01", "control_id": "AG-01", "layer": "AG", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AG-02", "type": "Control", "label": "Agent Deployment Policy and Pre-Deployment Review Gate", "canonical_id": "apeiris://agentic/controls/AG-02", "control_id": "AG-02", "layer": "AG", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AG-03", "type": "Control", "label": "Agentic AI Risk Assessment Framework", "canonical_id": "apeiris://agentic/controls/AG-03", "control_id": "AG-03", "layer": "AG", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AG-04", "type": "Control", "label": "Senior Accountability for Autonomous AI Systems", "canonical_id": "apeiris://agentic/controls/AG-04", "control_id": "AG-04", "layer": "AG", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AG-05", "type": "Control", "label": "Agent Incident Response Program", "canonical_id": "apeiris://agentic/controls/AG-05", "control_id": "AG-05", "layer": "AG", "blocking_effect": "requires-review" }, { "id": "control:agentic/AG-06", "type": "Control", "label": "Agent Program Metrics and KPIs", "canonical_id": "apeiris://agentic/controls/AG-06", "control_id": "AG-06", "layer": "AG", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AG-07", "type": "Control", "label": "Continuous Improvement and Lessons Learned", "canonical_id": "apeiris://agentic/controls/AG-07", "control_id": "AG-07", "layer": "AG", "blocking_effect": "advisory" }, { "id": "control:agentic/AG-08", "type": "Control", "label": "BehavioralAttestation Production", "canonical_id": "apeiris://agentic/controls/AG-08", "control_id": "AG-08", "layer": "AG", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AM-01", "type": "Control", "label": "Behavioral Telemetry Collection Baseline", "canonical_id": "apeiris://agentic/controls/AM-01", "control_id": "AM-01", "layer": "AM", "blocking_effect": "advisory" }, { "id": "control:agentic/AM-02", "type": "Control", "label": "Anomalous Action Detection", "canonical_id": "apeiris://agentic/controls/AM-02", "control_id": "AM-02", "layer": "AM", "blocking_effect": "advisory" }, { "id": "control:agentic/AM-03", "type": "Control", "label": "Goal Drift and Intent Deviation Detection", "canonical_id": "apeiris://agentic/controls/AM-03", "control_id": "AM-03", "layer": "AM", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AM-04", "type": "Control", "label": "Resource Consumption Anomaly Monitoring", "canonical_id": "apeiris://agentic/controls/AM-04", "control_id": "AM-04", "layer": "AM", "blocking_effect": "advisory" }, { "id": "control:agentic/AM-05", "type": "Control", "label": "Multi-Agent Communication Monitoring", "canonical_id": "apeiris://agentic/controls/AM-05", "control_id": "AM-05", "layer": "AM", "blocking_effect": "requires-review" }, { "id": "control:agentic/AM-06", "type": "Control", "label": "Monitoring Log Integrity", "canonical_id": "apeiris://agentic/controls/AM-06", "control_id": "AM-06", "layer": "AM", "blocking_effect": "advisory" }, { "id": "control:agentic/AM-07", "type": "Control", "label": "Real-Time Alerting and Automated Agent Suspension", "canonical_id": "apeiris://agentic/controls/AM-07", "control_id": "AM-07", "layer": "AM", "blocking_effect": "advisory" }, { "id": "control:agentic/AM-08", "type": "Control", "label": "Monitoring Coverage Evidence Package", "canonical_id": "apeiris://agentic/controls/AM-08", "control_id": "AM-08", "layer": "AM", "blocking_effect": "advisory" }, { "id": "control:agentic/AM-09", "type": "Control", "label": "Action Effect Reconciliation", "canonical_id": "apeiris://agentic/controls/AM-09", "control_id": "AM-09", "layer": "AM", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AO-01", "type": "Control", "label": "Multi-Agent Trust Chain Documentation", "canonical_id": "apeiris://agentic/controls/AO-01", "control_id": "AO-01", "layer": "AO", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AO-02", "type": "Control", "label": "Sub-Agent Authorization and Capability Delegation", "canonical_id": "apeiris://agentic/controls/AO-02", "control_id": "AO-02", "layer": "AO", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AO-03", "type": "Control", "label": "Orchestration Message Integrity", "canonical_id": "apeiris://agentic/controls/AO-03", "control_id": "AO-03", "layer": "AO", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AO-04", "type": "Control", "label": "Human-in-the-Loop Gates for High-Consequence Orchestrations", "canonical_id": "apeiris://agentic/controls/AO-04", "control_id": "AO-04", "layer": "AO", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AO-05", "type": "Control", "label": "Orchestration Loop and Escalation Detection", "canonical_id": "apeiris://agentic/controls/AO-05", "control_id": "AO-05", "layer": "AO", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AO-06", "type": "Control", "label": "Cross-Organization Orchestration Trust Governance", "canonical_id": "apeiris://agentic/controls/AO-06", "control_id": "AO-06", "layer": "AO", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AO-07", "type": "Control", "label": "Orchestration Audit Trail", "canonical_id": "apeiris://agentic/controls/AO-07", "control_id": "AO-07", "layer": "AO", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AO-08", "type": "Control", "label": "Orchestration Governance Evidence Package", "canonical_id": "apeiris://agentic/controls/AO-08", "control_id": "AO-08", "layer": "AO", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AT-01", "type": "Control", "label": "Tool and Plugin Registry", "canonical_id": "apeiris://agentic/controls/AT-01", "control_id": "AT-01", "layer": "AT", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AT-02", "type": "Control", "label": "Tool Permission Scoping", "canonical_id": "apeiris://agentic/controls/AT-02", "control_id": "AT-02", "layer": "AT", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AT-03", "type": "Control", "label": "Tool Input Validation and Schema Enforcement", "canonical_id": "apeiris://agentic/controls/AT-03", "control_id": "AT-03", "layer": "AT", "blocking_effect": "advisory" }, { "id": "control:agentic/AT-04", "type": "Control", "label": "Tool Output Sanitization and Integrity Verification", "canonical_id": "apeiris://agentic/controls/AT-04", "control_id": "AT-04", "layer": "AT", "blocking_effect": "advisory" }, { "id": "control:agentic/AT-05", "type": "Control", "label": "Dangerous and Irreversible Tool Access Controls", "canonical_id": "apeiris://agentic/controls/AT-05", "control_id": "AT-05", "layer": "AT", "blocking_effect": "blocks-deployment" }, { "id": "control:agentic/AT-06", "type": "Control", "label": "Third-Party Plugin Vetting and Sandboxing", "canonical_id": "apeiris://agentic/controls/AT-06", "control_id": "AT-06", "layer": "AT", "blocking_effect": "advisory" }, { "id": "control:agentic/AT-07", "type": "Control", "label": "Tool Usage Audit Trail", "canonical_id": "apeiris://agentic/controls/AT-07", "control_id": "AT-07", "layer": "AT", "blocking_effect": "blocks-runtime-action" }, { "id": "control:agentic/AT-08", "type": "Control", "label": "Tool Governance Evidence Package", "canonical_id": "apeiris://agentic/controls/AT-08", "control_id": "AT-08", "layer": "AT", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PA-01", "type": "Control", "label": "Delegation of Authority Integration", "canonical_id": "apeiris://authority/controls/PA-01", "control_id": "PA-01", "layer": "PA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PA-02", "type": "Control", "label": "Approval Limit Enforcement", "canonical_id": "apeiris://authority/controls/PA-02", "control_id": "PA-02", "layer": "PA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PA-03", "type": "Control", "label": "Escalation Gate Design and Testing", "canonical_id": "apeiris://authority/controls/PA-03", "control_id": "PA-03", "layer": "PA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PA-04", "type": "Control", "label": "Principal Accountability Binding", "canonical_id": "apeiris://authority/controls/PA-04", "control_id": "PA-04", "layer": "PA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PA-05", "type": "Control", "label": "Multi-Party Approval Workflow", "canonical_id": "apeiris://authority/controls/PA-05", "control_id": "PA-05", "layer": "PA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PA-06", "type": "Control", "label": "Emergency Override and Break-Glass", "canonical_id": "apeiris://authority/controls/PA-06", "control_id": "PA-06", "layer": "PA", "blocking_effect": "requires-review" }, { "id": "control:authority/PA-07", "type": "Control", "label": "Approval Record and Audit Trail", "canonical_id": "apeiris://authority/controls/PA-07", "control_id": "PA-07", "layer": "PA", "blocking_effect": "advisory" }, { "id": "control:authority/PA-08", "type": "Control", "label": "Authority Scope Change Notification", "canonical_id": "apeiris://authority/controls/PA-08", "control_id": "PA-08", "layer": "PA", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PA-09", "type": "Control", "label": "Authority Scope Layer Evidence Package", "canonical_id": "apeiris://authority/controls/PA-09", "control_id": "PA-09", "layer": "PA", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PE-01", "type": "Control", "label": "Policy Evidence Archive", "canonical_id": "apeiris://authority/controls/PE-01", "control_id": "PE-01", "layer": "PE", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PE-02", "type": "Control", "label": "Regulatory Disclosure Readiness", "canonical_id": "apeiris://authority/controls/PE-02", "control_id": "PE-02", "layer": "PE", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PE-03", "type": "Control", "label": "Internal Audit Support Package", "canonical_id": "apeiris://authority/controls/PE-03", "control_id": "PE-03", "layer": "PE", "blocking_effect": "requires-review" }, { "id": "control:authority/PE-04", "type": "Control", "label": "Cross-Domain Policy Evidence Integration", "canonical_id": "apeiris://authority/controls/PE-04", "control_id": "PE-04", "layer": "PE", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PE-05", "type": "Control", "label": "Contract Audit Trail", "canonical_id": "apeiris://authority/controls/PE-05", "control_id": "PE-05", "layer": "PE", "blocking_effect": "advisory" }, { "id": "control:authority/PE-06", "type": "Control", "label": "Board and Senior Management Policy Reporting", "canonical_id": "apeiris://authority/controls/PE-06", "control_id": "PE-06", "layer": "PE", "blocking_effect": "requires-review" }, { "id": "control:authority/PE-07", "type": "Control", "label": "Policy Governance Program Assessment", "canonical_id": "apeiris://authority/controls/PE-07", "control_id": "PE-07", "layer": "PE", "blocking_effect": "advisory" }, { "id": "control:authority/PE-08", "type": "Control", "label": "Policy Attestation", "canonical_id": "apeiris://authority/controls/PE-08", "control_id": "PE-08", "layer": "PE", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PG-01", "type": "Control", "label": "Policy Adherence Monitoring", "canonical_id": "apeiris://authority/controls/PG-01", "control_id": "PG-01", "layer": "PG", "blocking_effect": "advisory" }, { "id": "control:authority/PG-02", "type": "Control", "label": "Authority Limit Monitoring", "canonical_id": "apeiris://authority/controls/PG-02", "control_id": "PG-02", "layer": "PG", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PG-03", "type": "Control", "label": "Contract Obligation Compliance Monitoring", "canonical_id": "apeiris://authority/controls/PG-03", "control_id": "PG-03", "layer": "PG", "blocking_effect": "advisory" }, { "id": "control:authority/PG-04", "type": "Control", "label": "Policy Incident Classification and Response", "canonical_id": "apeiris://authority/controls/PG-04", "control_id": "PG-04", "layer": "PG", "blocking_effect": "requires-review" }, { "id": "control:authority/PG-05", "type": "Control", "label": "Knowledge Source Staleness Detection", "canonical_id": "apeiris://authority/controls/PG-05", "control_id": "PG-05", "layer": "PG", "blocking_effect": "advisory" }, { "id": "control:authority/PG-06", "type": "Control", "label": "Operating Intent Drift Detection", "canonical_id": "apeiris://authority/controls/PG-06", "control_id": "PG-06", "layer": "PG", "blocking_effect": "requires-review" }, { "id": "control:authority/PG-07", "type": "Control", "label": "Policy Governance Reporting", "canonical_id": "apeiris://authority/controls/PG-07", "control_id": "PG-07", "layer": "PG", "blocking_effect": "advisory" }, { "id": "control:authority/PG-08", "type": "Control", "label": "Lessons Learned and Policy Improvement", "canonical_id": "apeiris://authority/controls/PG-08", "control_id": "PG-08", "layer": "PG", "blocking_effect": "requires-review" }, { "id": "control:authority/PG-09", "type": "Control", "label": "Policy Governance Layer Evidence Package", "canonical_id": "apeiris://authority/controls/PG-09", "control_id": "PG-09", "layer": "PG", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PO-01", "type": "Control", "label": "Internal Policy Register for AI Deployments", "canonical_id": "apeiris://authority/controls/PO-01", "control_id": "PO-01", "layer": "PO", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PO-02", "type": "Control", "label": "Policy Version Control and Distribution", "canonical_id": "apeiris://authority/controls/PO-02", "control_id": "PO-02", "layer": "PO", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PO-03", "type": "Control", "label": "Contractual Obligation Extraction", "canonical_id": "apeiris://authority/controls/PO-03", "control_id": "PO-03", "layer": "PO", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PO-04", "type": "Control", "label": "Contract Term Conflict Detection", "canonical_id": "apeiris://authority/controls/PO-04", "control_id": "PO-04", "layer": "PO", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PO-05", "type": "Control", "label": "Data Use Policy Enforcement", "canonical_id": "apeiris://authority/controls/PO-05", "control_id": "PO-05", "layer": "PO", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PO-06", "type": "Control", "label": "Communication and Commitment Policy", "canonical_id": "apeiris://authority/controls/PO-06", "control_id": "PO-06", "layer": "PO", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PO-07", "type": "Control", "label": "Third-Party Policy Requirements", "canonical_id": "apeiris://authority/controls/PO-07", "control_id": "PO-07", "layer": "PO", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PO-08", "type": "Control", "label": "Policy Obligation Gap Analysis", "canonical_id": "apeiris://authority/controls/PO-08", "control_id": "PO-08", "layer": "PO", "blocking_effect": "advisory" }, { "id": "control:authority/PO-09", "type": "Control", "label": "Policy Obligation Layer Evidence Package", "canonical_id": "apeiris://authority/controls/PO-09", "control_id": "PO-09", "layer": "PO", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PR-01", "type": "Control", "label": "AI Procurement Policy Integration", "canonical_id": "apeiris://authority/controls/PR-01", "control_id": "PR-01", "layer": "PR", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PR-02", "type": "Control", "label": "AI-Initiated Commitment Controls", "canonical_id": "apeiris://authority/controls/PR-02", "control_id": "PR-02", "layer": "PR", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PR-03", "type": "Control", "label": "Vendor Qualification Enforcement", "canonical_id": "apeiris://authority/controls/PR-03", "control_id": "PR-03", "layer": "PR", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PR-04", "type": "Control", "label": "Contract Review Gate Compliance", "canonical_id": "apeiris://authority/controls/PR-04", "control_id": "PR-04", "layer": "PR", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PR-05", "type": "Control", "label": "SLA Commitment Governance", "canonical_id": "apeiris://authority/controls/PR-05", "control_id": "PR-05", "layer": "PR", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PR-06", "type": "Control", "label": "AI in Contract Negotiation Controls", "canonical_id": "apeiris://authority/controls/PR-06", "control_id": "PR-06", "layer": "PR", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PR-07", "type": "Control", "label": "Contract Obligation Monitoring", "canonical_id": "apeiris://authority/controls/PR-07", "control_id": "PR-07", "layer": "PR", "blocking_effect": "advisory" }, { "id": "control:authority/PR-08", "type": "Control", "label": "Procurement Audit Trail", "canonical_id": "apeiris://authority/controls/PR-08", "control_id": "PR-08", "layer": "PR", "blocking_effect": "advisory" }, { "id": "control:authority/PR-09", "type": "Control", "label": "Procurement Governance Layer Evidence Package", "canonical_id": "apeiris://authority/controls/PR-09", "control_id": "PR-09", "layer": "PR", "blocking_effect": "requires-review" }, { "id": "control:authority/PV-01", "type": "Control", "label": "Operating Intent Declaration", "canonical_id": "apeiris://authority/controls/PV-01", "control_id": "PV-01", "layer": "PV", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PV-02", "type": "Control", "label": "Operating Intent Boundary Validation", "canonical_id": "apeiris://authority/controls/PV-02", "control_id": "PV-02", "layer": "PV", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PV-03", "type": "Control", "label": "Intended Purpose Alignment Review", "canonical_id": "apeiris://authority/controls/PV-03", "control_id": "PV-03", "layer": "PV", "blocking_effect": "requires-review" }, { "id": "control:authority/PV-04", "type": "Control", "label": "Authorized Knowledge Source Registry", "canonical_id": "apeiris://authority/controls/PV-04", "control_id": "PV-04", "layer": "PV", "blocking_effect": "blocks-runtime-action" }, { "id": "control:authority/PV-05", "type": "Control", "label": "Knowledge Source Version Governance", "canonical_id": "apeiris://authority/controls/PV-05", "control_id": "PV-05", "layer": "PV", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PV-06", "type": "Control", "label": "Operating Context Change Management", "canonical_id": "apeiris://authority/controls/PV-06", "control_id": "PV-06", "layer": "PV", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PV-07", "type": "Control", "label": "Deployment Scope Attestation", "canonical_id": "apeiris://authority/controls/PV-07", "control_id": "PV-07", "layer": "PV", "blocking_effect": "blocks-deployment" }, { "id": "control:authority/PV-08", "type": "Control", "label": "Principal Intent vs. Agent Behavior Alignment", "canonical_id": "apeiris://authority/controls/PV-08", "control_id": "PV-08", "layer": "PV", "blocking_effect": "advisory" }, { "id": "control:authority/PV-09", "type": "Control", "label": "Principal Verification Layer Evidence Package", "canonical_id": "apeiris://authority/controls/PV-09", "control_id": "PV-09", "layer": "PV", "blocking_effect": "requires-review" }, { "id": "control:compliance/AU-01", "type": "Control", "label": "Audit Readiness Program", "canonical_id": "apeiris://compliance/controls/AU-01", "control_id": "AU-01", "layer": "AU", "blocking_effect": "advisory" }, { "id": "control:compliance/AU-02", "type": "Control", "label": "Evidence Collection, Curation, and Validation", "canonical_id": "apeiris://compliance/controls/AU-02", "control_id": "AU-02", "layer": "AU", "blocking_effect": "advisory" }, { "id": "control:compliance/AU-03", "type": "Control", "label": "Auditor Access and Cooperation Protocols", "canonical_id": "apeiris://compliance/controls/AU-03", "control_id": "AU-03", "layer": "AU", "blocking_effect": "requires-review" }, { "id": "control:compliance/AU-04", "type": "Control", "label": "Audit Trail Integrity", "canonical_id": "apeiris://compliance/controls/AU-04", "control_id": "AU-04", "layer": "AU", "blocking_effect": "advisory" }, { "id": "control:compliance/AU-05", "type": "Control", "label": "Regulatory Examination Response Program", "canonical_id": "apeiris://compliance/controls/AU-05", "control_id": "AU-05", "layer": "AU", "blocking_effect": "requires-review" }, { "id": "control:compliance/AU-06", "type": "Control", "label": "Audit Finding Remediation Program", "canonical_id": "apeiris://compliance/controls/AU-06", "control_id": "AU-06", "layer": "AU", "blocking_effect": "requires-review" }, { "id": "control:compliance/AU-07", "type": "Control", "label": "Multi-Framework Evidence Reuse", "canonical_id": "apeiris://compliance/controls/AU-07", "control_id": "AU-07", "layer": "AU", "blocking_effect": "advisory" }, { "id": "control:compliance/AU-08", "type": "Control", "label": "ComplianceAttestation Production", "canonical_id": "apeiris://compliance/controls/AU-08", "control_id": "AU-08", "layer": "AU", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/CA-01", "type": "Control", "label": "Regulatory Scope Determination", "canonical_id": "apeiris://compliance/controls/CA-01", "control_id": "CA-01", "layer": "CA", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/CA-02", "type": "Control", "label": "Compliance Framework Selection and Mapping", "canonical_id": "apeiris://compliance/controls/CA-02", "control_id": "CA-02", "layer": "CA", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/CA-03", "type": "Control", "label": "Cross-Domain Evidence Routing", "canonical_id": "apeiris://compliance/controls/CA-03", "control_id": "CA-03", "layer": "CA", "blocking_effect": "requires-review" }, { "id": "control:compliance/CA-04", "type": "Control", "label": "Design-Time Compliance Classification", "canonical_id": "apeiris://compliance/controls/CA-04", "control_id": "CA-04", "layer": "CA", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/CA-05", "type": "Control", "label": "Regulatory Change Management", "canonical_id": "apeiris://compliance/controls/CA-05", "control_id": "CA-05", "layer": "CA", "blocking_effect": "advisory" }, { "id": "control:compliance/CA-06", "type": "Control", "label": "Compliance Obligation Gap Analysis", "canonical_id": "apeiris://compliance/controls/CA-06", "control_id": "CA-06", "layer": "CA", "blocking_effect": "advisory" }, { "id": "control:compliance/CA-07", "type": "Control", "label": "Third-Party and Supply Chain Compliance Obligations", "canonical_id": "apeiris://compliance/controls/CA-07", "control_id": "CA-07", "layer": "CA", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/CA-08", "type": "Control", "label": "Compliance Architecture Evidence Package", "canonical_id": "apeiris://compliance/controls/CA-08", "control_id": "CA-08", "layer": "CA", "blocking_effect": "requires-review" }, { "id": "control:compliance/CG-01", "type": "Control", "label": "Compliance Governance Structure", "canonical_id": "apeiris://compliance/controls/CG-01", "control_id": "CG-01", "layer": "CG", "blocking_effect": "requires-review" }, { "id": "control:compliance/CG-02", "type": "Control", "label": "Compliance Policy Framework for AI", "canonical_id": "apeiris://compliance/controls/CG-02", "control_id": "CG-02", "layer": "CG", "blocking_effect": "requires-review" }, { "id": "control:compliance/CG-03", "type": "Control", "label": "Senior and Board-Level Accountability for AI Compliance", "canonical_id": "apeiris://compliance/controls/CG-03", "control_id": "CG-03", "layer": "CG", "blocking_effect": "requires-review" }, { "id": "control:compliance/CG-04", "type": "Control", "label": "Compliance Risk Appetite Definition", "canonical_id": "apeiris://compliance/controls/CG-04", "control_id": "CG-04", "layer": "CG", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/CG-05", "type": "Control", "label": "Compliance Program Resourcing", "canonical_id": "apeiris://compliance/controls/CG-05", "control_id": "CG-05", "layer": "CG", "blocking_effect": "requires-review" }, { "id": "control:compliance/CG-06", "type": "Control", "label": "Compliance Incident Response", "canonical_id": "apeiris://compliance/controls/CG-06", "control_id": "CG-06", "layer": "CG", "blocking_effect": "requires-review" }, { "id": "control:compliance/CG-07", "type": "Control", "label": "Compliance Program Metrics and KPIs", "canonical_id": "apeiris://compliance/controls/CG-07", "control_id": "CG-07", "layer": "CG", "blocking_effect": "advisory" }, { "id": "control:compliance/CG-08", "type": "Control", "label": "Compliance Governance Evidence Package", "canonical_id": "apeiris://compliance/controls/CG-08", "control_id": "CG-08", "layer": "CG", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/CI-01", "type": "Control", "label": "Compliance Control Testing Program", "canonical_id": "apeiris://compliance/controls/CI-01", "control_id": "CI-01", "layer": "CI", "blocking_effect": "requires-review" }, { "id": "control:compliance/CI-02", "type": "Control", "label": "Continuous Compliance Monitoring", "canonical_id": "apeiris://compliance/controls/CI-02", "control_id": "CI-02", "layer": "CI", "blocking_effect": "advisory" }, { "id": "control:compliance/CI-03", "type": "Control", "label": "AI-Specific Compliance KPIs", "canonical_id": "apeiris://compliance/controls/CI-03", "control_id": "CI-03", "layer": "CI", "blocking_effect": "advisory" }, { "id": "control:compliance/CI-04", "type": "Control", "label": "Compliance Tooling Implementation", "canonical_id": "apeiris://compliance/controls/CI-04", "control_id": "CI-04", "layer": "CI", "blocking_effect": "advisory" }, { "id": "control:compliance/CI-05", "type": "Control", "label": "Compliance Training and Awareness Program", "canonical_id": "apeiris://compliance/controls/CI-05", "control_id": "CI-05", "layer": "CI", "blocking_effect": "requires-review" }, { "id": "control:compliance/CI-06", "type": "Control", "label": "Internal Audit of AI Compliance Controls", "canonical_id": "apeiris://compliance/controls/CI-06", "control_id": "CI-06", "layer": "CI", "blocking_effect": "requires-review" }, { "id": "control:compliance/CI-07", "type": "Control", "label": "Remediation Tracking and Closure", "canonical_id": "apeiris://compliance/controls/CI-07", "control_id": "CI-07", "layer": "CI", "blocking_effect": "requires-review" }, { "id": "control:compliance/CI-08", "type": "Control", "label": "Compliance Implementation Evidence Package", "canonical_id": "apeiris://compliance/controls/CI-08", "control_id": "CI-08", "layer": "CI", "blocking_effect": "requires-review" }, { "id": "control:compliance/OB-01", "type": "Control", "label": "Obligation Register", "canonical_id": "apeiris://compliance/controls/OB-01", "control_id": "OB-01", "layer": "OB", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/OB-02", "type": "Control", "label": "Obligation Owner Assignment", "canonical_id": "apeiris://compliance/controls/OB-02", "control_id": "OB-02", "layer": "OB", "blocking_effect": "requires-review" }, { "id": "control:compliance/OB-03", "type": "Control", "label": "Obligation Due Date and Milestone Tracking", "canonical_id": "apeiris://compliance/controls/OB-03", "control_id": "OB-03", "layer": "OB", "blocking_effect": "advisory" }, { "id": "control:compliance/OB-04", "type": "Control", "label": "EU AI Act Conformity Assessment Obligation Management", "canonical_id": "apeiris://compliance/controls/OB-04", "control_id": "OB-04", "layer": "OB", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/OB-05", "type": "Control", "label": "DORA ICT Obligation Tracking", "canonical_id": "apeiris://compliance/controls/OB-05", "control_id": "OB-05", "layer": "OB", "blocking_effect": "advisory" }, { "id": "control:compliance/OB-06", "type": "Control", "label": "Contractual AI Obligation Management", "canonical_id": "apeiris://compliance/controls/OB-06", "control_id": "OB-06", "layer": "OB", "blocking_effect": "requires-review" }, { "id": "control:compliance/OB-07", "type": "Control", "label": "Obligation Fulfillment Verification", "canonical_id": "apeiris://compliance/controls/OB-07", "control_id": "OB-07", "layer": "OB", "blocking_effect": "requires-review" }, { "id": "control:compliance/OB-08", "type": "Control", "label": "Obligations Evidence Package", "canonical_id": "apeiris://compliance/controls/OB-08", "control_id": "OB-08", "layer": "OB", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/RF-01", "type": "Control", "label": "EU AI Act High-Risk AI System Classification", "canonical_id": "apeiris://compliance/controls/RF-01", "control_id": "RF-01", "layer": "RF", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/RF-02", "type": "Control", "label": "EU AI Act Conformity Assessment Pathway Selection", "canonical_id": "apeiris://compliance/controls/RF-02", "control_id": "RF-02", "layer": "RF", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/RF-03", "type": "Control", "label": "EU AI Act Technical Documentation Package (Art. 11)", "canonical_id": "apeiris://compliance/controls/RF-03", "control_id": "RF-03", "layer": "RF", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/RF-04", "type": "Control", "label": "EU AI Act Post-Market Monitoring Plan (Art. 72)", "canonical_id": "apeiris://compliance/controls/RF-04", "control_id": "RF-04", "layer": "RF", "blocking_effect": "advisory" }, { "id": "control:compliance/RF-05", "type": "Control", "label": "FedRAMP Authorization Support for AI Systems", "canonical_id": "apeiris://compliance/controls/RF-05", "control_id": "RF-05", "layer": "RF", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/RF-06", "type": "Control", "label": "SOC 2 AI-Specific Evidence Production", "canonical_id": "apeiris://compliance/controls/RF-06", "control_id": "RF-06", "layer": "RF", "blocking_effect": "advisory" }, { "id": "control:compliance/RF-07", "type": "Control", "label": "ISO 42001 Certification Pathway", "canonical_id": "apeiris://compliance/controls/RF-07", "control_id": "RF-07", "layer": "RF", "blocking_effect": "blocks-deployment" }, { "id": "control:compliance/RF-08", "type": "Control", "label": "Regulatory Framework Evidence Package", "canonical_id": "apeiris://compliance/controls/RF-08", "control_id": "RF-08", "layer": "RF", "blocking_effect": "requires-review" }, { "id": "control:data/DA-01", "type": "Control", "label": "AI Data Access Authorization Framework", "canonical_id": "apeiris://data/controls/DA-01", "control_id": "DA-01", "layer": "DA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:data/DA-02", "type": "Control", "label": "Data Minimization Implementation for AI", "canonical_id": "apeiris://data/controls/DA-02", "control_id": "DA-02", "layer": "DA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:data/DA-03", "type": "Control", "label": "Consent-Based Data Access Controls", "canonical_id": "apeiris://data/controls/DA-03", "control_id": "DA-03", "layer": "DA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:data/DA-04", "type": "Control", "label": "Privileged Data Access Monitoring", "canonical_id": "apeiris://data/controls/DA-04", "control_id": "DA-04", "layer": "DA", "blocking_effect": "advisory" }, { "id": "control:data/DA-05", "type": "Control", "label": "AI Data Access Review and Recertification", "canonical_id": "apeiris://data/controls/DA-05", "control_id": "DA-05", "layer": "DA", "blocking_effect": "requires-review" }, { "id": "control:data/DA-06", "type": "Control", "label": "Cross-Border Data Access Jurisdiction Controls", "canonical_id": "apeiris://data/controls/DA-06", "control_id": "DA-06", "layer": "DA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:data/DA-07", "type": "Control", "label": "Emergency AI Data Access Procedures", "canonical_id": "apeiris://data/controls/DA-07", "control_id": "DA-07", "layer": "DA", "blocking_effect": "requires-review" }, { "id": "control:data/DA-08", "type": "Control", "label": "Data Access Evidence Package", "canonical_id": "apeiris://data/controls/DA-08", "control_id": "DA-08", "layer": "DA", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DI-01", "type": "Control", "label": "Data Integrity Baseline and Checksum Monitoring", "canonical_id": "apeiris://data/controls/DI-01", "control_id": "DI-01", "layer": "DI", "blocking_effect": "advisory" }, { "id": "control:data/DI-02", "type": "Control", "label": "Tamper Detection for AI Inference Inputs", "canonical_id": "apeiris://data/controls/DI-02", "control_id": "DI-02", "layer": "DI", "blocking_effect": "blocks-runtime-action" }, { "id": "control:data/DI-03", "type": "Control", "label": "Cross-System Data Consistency Validation", "canonical_id": "apeiris://data/controls/DI-03", "control_id": "DI-03", "layer": "DI", "blocking_effect": "requires-review" }, { "id": "control:data/DI-04", "type": "Control", "label": "AI Output Data Integrity Verification", "canonical_id": "apeiris://data/controls/DI-04", "control_id": "DI-04", "layer": "DI", "blocking_effect": "blocks-runtime-action" }, { "id": "control:data/DI-05", "type": "Control", "label": "Database and Storage Integrity Monitoring", "canonical_id": "apeiris://data/controls/DI-05", "control_id": "DI-05", "layer": "DI", "blocking_effect": "advisory" }, { "id": "control:data/DI-06", "type": "Control", "label": "Model Memorization Risk Assessment and Output Leakage Prevention", "canonical_id": "apeiris://data/controls/DI-06", "control_id": "DI-06", "layer": "DI", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DI-07", "type": "Control", "label": "Data Integrity Incident Response", "canonical_id": "apeiris://data/controls/DI-07", "control_id": "DI-07", "layer": "DI", "blocking_effect": "requires-review" }, { "id": "control:data/DI-08", "type": "Control", "label": "Data Integrity Evidence Package", "canonical_id": "apeiris://data/controls/DI-08", "control_id": "DI-08", "layer": "DI", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DL-01", "type": "Control", "label": "End-to-End Data Lineage Tracking", "canonical_id": "apeiris://data/controls/DL-01", "control_id": "DL-01", "layer": "DL", "blocking_effect": "advisory" }, { "id": "control:data/DL-02", "type": "Control", "label": "Training Data Lineage Documentation", "canonical_id": "apeiris://data/controls/DL-02", "control_id": "DL-02", "layer": "DL", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DL-03", "type": "Control", "label": "Inference-Time Data Lineage (Per-Decision Provenance)", "canonical_id": "apeiris://data/controls/DL-03", "control_id": "DL-03", "layer": "DL", "blocking_effect": "blocks-runtime-action" }, { "id": "control:data/DL-04", "type": "Control", "label": "Transformation and Enrichment Lineage", "canonical_id": "apeiris://data/controls/DL-04", "control_id": "DL-04", "layer": "DL", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DL-05", "type": "Control", "label": "Data Lineage Completeness Auditing", "canonical_id": "apeiris://data/controls/DL-05", "control_id": "DL-05", "layer": "DL", "blocking_effect": "advisory" }, { "id": "control:data/DL-06", "type": "Control", "label": "Data Lineage for Regulatory and Legal Purposes", "canonical_id": "apeiris://data/controls/DL-06", "control_id": "DL-06", "layer": "DL", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DL-07", "type": "Control", "label": "Data Lineage Tooling Governance", "canonical_id": "apeiris://data/controls/DL-07", "control_id": "DL-07", "layer": "DL", "blocking_effect": "advisory" }, { "id": "control:data/DL-08", "type": "Control", "label": "Data Lineage Evidence Package", "canonical_id": "apeiris://data/controls/DL-08", "control_id": "DL-08", "layer": "DL", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DM-01", "type": "Control", "label": "AI Data Asset Inventory and Cataloging", "canonical_id": "apeiris://data/controls/DM-01", "control_id": "DM-01", "layer": "DM", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DM-02", "type": "Control", "label": "Data Classification and Sensitivity Tagging at Rest", "canonical_id": "apeiris://data/controls/DM-02", "control_id": "DM-02", "layer": "DM", "blocking_effect": "blocks-runtime-action" }, { "id": "control:data/DM-03", "type": "Control", "label": "Data Retention and Disposal Governance", "canonical_id": "apeiris://data/controls/DM-03", "control_id": "DM-03", "layer": "DM", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DM-04", "type": "Control", "label": "Master Data Management for AI Systems", "canonical_id": "apeiris://data/controls/DM-04", "control_id": "DM-04", "layer": "DM", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DM-05", "type": "Control", "label": "Data Quality Standards and Target Setting", "canonical_id": "apeiris://data/controls/DM-05", "control_id": "DM-05", "layer": "DM", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DM-06", "type": "Control", "label": "Data Schema Governance and Breaking Change Control", "canonical_id": "apeiris://data/controls/DM-06", "control_id": "DM-06", "layer": "DM", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DM-07", "type": "Control", "label": "Synthetic Data Governance", "canonical_id": "apeiris://data/controls/DM-07", "control_id": "DM-07", "layer": "DM", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DM-08", "type": "Control", "label": "Data Management Evidence Package", "canonical_id": "apeiris://data/controls/DM-08", "control_id": "DM-08", "layer": "DM", "blocking_effect": "requires-review" }, { "id": "control:data/DV-01", "type": "Control", "label": "Schema Validation for AI Inputs", "canonical_id": "apeiris://data/controls/DV-01", "control_id": "DV-01", "layer": "DV", "blocking_effect": "blocks-runtime-action" }, { "id": "control:data/DV-02", "type": "Control", "label": "Data Quality Gate Enforcement", "canonical_id": "apeiris://data/controls/DV-02", "control_id": "DV-02", "layer": "DV", "blocking_effect": "blocks-runtime-action" }, { "id": "control:data/DV-03", "type": "Control", "label": "Statistical Distribution Validation", "canonical_id": "apeiris://data/controls/DV-03", "control_id": "DV-03", "layer": "DV", "blocking_effect": "advisory" }, { "id": "control:data/DV-04", "type": "Control", "label": "AI Output Validation Rules", "canonical_id": "apeiris://data/controls/DV-04", "control_id": "DV-04", "layer": "DV", "blocking_effect": "blocks-runtime-action" }, { "id": "control:data/DV-05", "type": "Control", "label": "Validation Exception Management", "canonical_id": "apeiris://data/controls/DV-05", "control_id": "DV-05", "layer": "DV", "blocking_effect": "requires-review" }, { "id": "control:data/DV-06", "type": "Control", "label": "Validation Pipeline Monitoring", "canonical_id": "apeiris://data/controls/DV-06", "control_id": "DV-06", "layer": "DV", "blocking_effect": "advisory" }, { "id": "control:data/DV-07", "type": "Control", "label": "Data Validation Tooling Governance", "canonical_id": "apeiris://data/controls/DV-07", "control_id": "DV-07", "layer": "DV", "blocking_effect": "requires-review" }, { "id": "control:data/DV-08", "type": "Control", "label": "DataGovernanceAttestation Production", "canonical_id": "apeiris://data/controls/DV-08", "control_id": "DV-08", "layer": "DV", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DX-01", "type": "Control", "label": "Data Sensitivity Classification Framework for AI", "canonical_id": "apeiris://data/controls/DX-01", "control_id": "DX-01", "layer": "DX", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DX-02", "type": "Control", "label": "Inter-System Data Transfer Authorization", "canonical_id": "apeiris://data/controls/DX-02", "control_id": "DX-02", "layer": "DX", "blocking_effect": "blocks-runtime-action" }, { "id": "control:data/DX-03", "type": "Control", "label": "API Contract Governance for AI Data Exchange", "canonical_id": "apeiris://data/controls/DX-03", "control_id": "DX-03", "layer": "DX", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DX-04", "type": "Control", "label": "Cross-Border Data Transfer Controls", "canonical_id": "apeiris://data/controls/DX-04", "control_id": "DX-04", "layer": "DX", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DX-05", "type": "Control", "label": "Third-Party Data Sharing Agreements and Controls", "canonical_id": "apeiris://data/controls/DX-05", "control_id": "DX-05", "layer": "DX", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DX-06", "type": "Control", "label": "Data Exchange Audit Trail", "canonical_id": "apeiris://data/controls/DX-06", "control_id": "DX-06", "layer": "DX", "blocking_effect": "advisory" }, { "id": "control:data/DX-07", "type": "Control", "label": "Data Exchange Security Controls", "canonical_id": "apeiris://data/controls/DX-07", "control_id": "DX-07", "layer": "DX", "blocking_effect": "blocks-deployment" }, { "id": "control:data/DX-08", "type": "Control", "label": "Data Exchange Evidence Package", "canonical_id": "apeiris://data/controls/DX-08", "control_id": "DX-08", "layer": "DX", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EF-01", "type": "Control", "label": "Ethics Principles Adoption and Operationalization", "canonical_id": "apeiris://ethics/controls/EF-01", "control_id": "EF-01", "layer": "EF", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EF-02", "type": "Control", "label": "Values-to-Design Mapping", "canonical_id": "apeiris://ethics/controls/EF-02", "control_id": "EF-02", "layer": "EF", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EF-03", "type": "Control", "label": "Ethical Risk Appetite Definition", "canonical_id": "apeiris://ethics/controls/EF-03", "control_id": "EF-03", "layer": "EF", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EF-04", "type": "Control", "label": "Ethics Impact Assessment Framework", "canonical_id": "apeiris://ethics/controls/EF-04", "control_id": "EF-04", "layer": "EF", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EF-05", "type": "Control", "label": "EU AI Act Prohibited Practices Governance (Art. 5)", "canonical_id": "apeiris://ethics/controls/EF-05", "control_id": "EF-05", "layer": "EF", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EF-06", "type": "Control", "label": "Ethics-by-Design Integration in Development Lifecycle", "canonical_id": "apeiris://ethics/controls/EF-06", "control_id": "EF-06", "layer": "EF", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EF-07", "type": "Control", "label": "External Ethics Stakeholder Engagement", "canonical_id": "apeiris://ethics/controls/EF-07", "control_id": "EF-07", "layer": "EF", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EF-08", "type": "Control", "label": "Ethics Foundations Evidence Package", "canonical_id": "apeiris://ethics/controls/EF-08", "control_id": "EF-08", "layer": "EF", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EG-01", "type": "Control", "label": "Ethics Governance Structure", "canonical_id": "apeiris://ethics/controls/EG-01", "control_id": "EG-01", "layer": "EG", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EG-02", "type": "Control", "label": "AI Ethics Policy Framework", "canonical_id": "apeiris://ethics/controls/EG-02", "control_id": "EG-02", "layer": "EG", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EG-03", "type": "Control", "label": "Senior and Board-Level Ethics Accountability", "canonical_id": "apeiris://ethics/controls/EG-03", "control_id": "EG-03", "layer": "EG", "blocking_effect": "requires-review" }, { "id": "control:ethics/EG-04", "type": "Control", "label": "Ethics Training and Capability Building", "canonical_id": "apeiris://ethics/controls/EG-04", "control_id": "EG-04", "layer": "EG", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EG-05", "type": "Control", "label": "Third-Party AI Provider Ethics Accountability", "canonical_id": "apeiris://ethics/controls/EG-05", "control_id": "EG-05", "layer": "EG", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EG-06", "type": "Control", "label": "Ethics Incident Response", "canonical_id": "apeiris://ethics/controls/EG-06", "control_id": "EG-06", "layer": "EG", "blocking_effect": "requires-review" }, { "id": "control:ethics/EG-07", "type": "Control", "label": "Ethics Program Metrics and Effectiveness Measurement", "canonical_id": "apeiris://ethics/controls/EG-07", "control_id": "EG-07", "layer": "EG", "blocking_effect": "advisory" }, { "id": "control:ethics/EG-08", "type": "Control", "label": "EthicsAttestation Production", "canonical_id": "apeiris://ethics/controls/EG-08", "control_id": "EG-08", "layer": "EG", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/EG-09", "type": "Control", "label": "Environmental Sustainability and Compute Impact Disclosure", "canonical_id": "apeiris://ethics/controls/EG-09", "control_id": "EG-09", "layer": "EG", "blocking_effect": "advisory" }, { "id": "control:ethics/FA-01", "type": "Control", "label": "Protected Characteristic Identification and Scope", "canonical_id": "apeiris://ethics/controls/FA-01", "control_id": "FA-01", "layer": "FA", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/FA-02", "type": "Control", "label": "Algorithmic Bias Impact Assessment", "canonical_id": "apeiris://ethics/controls/FA-02", "control_id": "FA-02", "layer": "FA", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/FA-03", "type": "Control", "label": "Fairness Metric Selection and Justification", "canonical_id": "apeiris://ethics/controls/FA-03", "control_id": "FA-03", "layer": "FA", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/FA-04", "type": "Control", "label": "Independent Bias Testing Methodology", "canonical_id": "apeiris://ethics/controls/FA-04", "control_id": "FA-04", "layer": "FA", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/FA-05", "type": "Control", "label": "NYC Local Law 144 and Analogous Audit Compliance", "canonical_id": "apeiris://ethics/controls/FA-05", "control_id": "FA-05", "layer": "FA", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/FA-06", "type": "Control", "label": "Disparate Impact Analysis", "canonical_id": "apeiris://ethics/controls/FA-06", "control_id": "FA-06", "layer": "FA", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/FA-07", "type": "Control", "label": "Bias Remediation Governance", "canonical_id": "apeiris://ethics/controls/FA-07", "control_id": "FA-07", "layer": "FA", "blocking_effect": "requires-review" }, { "id": "control:ethics/FA-08", "type": "Control", "label": "Fairness and Accountability Evidence Package", "canonical_id": "apeiris://ethics/controls/FA-08", "control_id": "FA-08", "layer": "FA", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/FM-01", "type": "Control", "label": "Production Fairness Monitoring Program", "canonical_id": "apeiris://ethics/controls/FM-01", "control_id": "FM-01", "layer": "FM", "blocking_effect": "advisory" }, { "id": "control:ethics/FM-02", "type": "Control", "label": "Disparate Outcome Threshold Governance", "canonical_id": "apeiris://ethics/controls/FM-02", "control_id": "FM-02", "layer": "FM", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/FM-03", "type": "Control", "label": "Statistical Parity and Equalized Odds Monitoring", "canonical_id": "apeiris://ethics/controls/FM-03", "control_id": "FM-03", "layer": "FM", "blocking_effect": "advisory" }, { "id": "control:ethics/FM-04", "type": "Control", "label": "Feedback Loop and Reinforcement Bias Detection", "canonical_id": "apeiris://ethics/controls/FM-04", "control_id": "FM-04", "layer": "FM", "blocking_effect": "advisory" }, { "id": "control:ethics/FM-05", "type": "Control", "label": "Fairness Incident Response Program", "canonical_id": "apeiris://ethics/controls/FM-05", "control_id": "FM-05", "layer": "FM", "blocking_effect": "requires-review" }, { "id": "control:ethics/FM-06", "type": "Control", "label": "AI Performance Divergence by Demographic Group", "canonical_id": "apeiris://ethics/controls/FM-06", "control_id": "FM-06", "layer": "FM", "blocking_effect": "advisory" }, { "id": "control:ethics/FM-07", "type": "Control", "label": "Fairness Monitoring Audit Trail", "canonical_id": "apeiris://ethics/controls/FM-07", "control_id": "FM-07", "layer": "FM", "blocking_effect": "advisory" }, { "id": "control:ethics/FM-08", "type": "Control", "label": "Fairness Monitoring Evidence Package", "canonical_id": "apeiris://ethics/controls/FM-08", "control_id": "FM-08", "layer": "FM", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/HI-01", "type": "Control", "label": "Fundamental Rights Impact Assessment Content Governance", "canonical_id": "apeiris://ethics/controls/HI-01", "control_id": "HI-01", "layer": "HI", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/HI-02", "type": "Control", "label": "Human Dignity and Autonomy Preservation", "canonical_id": "apeiris://ethics/controls/HI-02", "control_id": "HI-02", "layer": "HI", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/HI-03", "type": "Control", "label": "Vulnerable Population Protection", "canonical_id": "apeiris://ethics/controls/HI-03", "control_id": "HI-03", "layer": "HI", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/HI-04", "type": "Control", "label": "Human Oversight and Override Mechanisms", "canonical_id": "apeiris://ethics/controls/HI-04", "control_id": "HI-04", "layer": "HI", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/HI-05", "type": "Control", "label": "Remedy and Redress Mechanisms", "canonical_id": "apeiris://ethics/controls/HI-05", "control_id": "HI-05", "layer": "HI", "blocking_effect": "requires-review" }, { "id": "control:ethics/HI-06", "type": "Control", "label": "Consent and Agency Preservation for AI Interactions", "canonical_id": "apeiris://ethics/controls/HI-06", "control_id": "HI-06", "layer": "HI", "blocking_effect": "requires-review" }, { "id": "control:ethics/HI-07", "type": "Control", "label": "Child and Minors Safety Controls", "canonical_id": "apeiris://ethics/controls/HI-07", "control_id": "HI-07", "layer": "HI", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/HI-08", "type": "Control", "label": "Human Interests Evidence Package", "canonical_id": "apeiris://ethics/controls/HI-08", "control_id": "HI-08", "layer": "HI", "blocking_effect": "requires-review" }, { "id": "control:ethics/XP-01", "type": "Control", "label": "Explainability Method Selection and Justification", "canonical_id": "apeiris://ethics/controls/XP-01", "control_id": "XP-01", "layer": "XP", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/XP-02", "type": "Control", "label": "Decision-Level Explanation Requirements", "canonical_id": "apeiris://ethics/controls/XP-02", "control_id": "XP-02", "layer": "XP", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/XP-03", "type": "Control", "label": "Explanation Fidelity and Accuracy Verification", "canonical_id": "apeiris://ethics/controls/XP-03", "control_id": "XP-03", "layer": "XP", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/XP-04", "type": "Control", "label": "Adverse Action Notice and Explanation (ECOA/Reg B, FCRA)", "canonical_id": "apeiris://ethics/controls/XP-04", "control_id": "XP-04", "layer": "XP", "blocking_effect": "blocks-runtime-action" }, { "id": "control:ethics/XP-05", "type": "Control", "label": "Model Card and System Card Transparency Disclosure", "canonical_id": "apeiris://ethics/controls/XP-05", "control_id": "XP-05", "layer": "XP", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/XP-06", "type": "Control", "label": "Technical vs. Non-Technical Explanation Tiers", "canonical_id": "apeiris://ethics/controls/XP-06", "control_id": "XP-06", "layer": "XP", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/XP-07", "type": "Control", "label": "Explanation Completeness and Coverage Auditing", "canonical_id": "apeiris://ethics/controls/XP-07", "control_id": "XP-07", "layer": "XP", "blocking_effect": "advisory" }, { "id": "control:ethics/XP-08", "type": "Control", "label": "Explainability Evidence Package", "canonical_id": "apeiris://ethics/controls/XP-08", "control_id": "XP-08", "layer": "XP", "blocking_effect": "blocks-deployment" }, { "id": "control:ethics/XP-09", "type": "Control", "label": "AI Interface Accessibility Conformance", "canonical_id": "apeiris://ethics/controls/XP-09", "control_id": "XP-09", "layer": "XP", "blocking_effect": "advisory" }, { "id": "control:finance/FC-01", "type": "Control", "label": "SOX 302/404 Controls over AI-Generated Financial Data", "canonical_id": "apeiris://finance/controls/FC-01", "control_id": "FC-01", "layer": "FC", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/FC-02", "type": "Control", "label": "AI-Generated Output Materiality Assessment", "canonical_id": "apeiris://finance/controls/FC-02", "control_id": "FC-02", "layer": "FC", "blocking_effect": "requires-review" }, { "id": "control:finance/FC-03", "type": "Control", "label": "Reconciliation Controls for AI-Influenced Financial Outputs", "canonical_id": "apeiris://finance/controls/FC-03", "control_id": "FC-03", "layer": "FC", "blocking_effect": "advisory" }, { "id": "control:finance/FC-04", "type": "Control", "label": "Change Management Controls for Financial AI Systems", "canonical_id": "apeiris://finance/controls/FC-04", "control_id": "FC-04", "layer": "FC", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/FC-05", "type": "Control", "label": "Access Controls for Financial AI Systems", "canonical_id": "apeiris://finance/controls/FC-05", "control_id": "FC-05", "layer": "FC", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/FC-06", "type": "Control", "label": "AI Operational Error and Financial Exception Management", "canonical_id": "apeiris://finance/controls/FC-06", "control_id": "FC-06", "layer": "FC", "blocking_effect": "requires-review" }, { "id": "control:finance/FC-07", "type": "Control", "label": "Financial Data Integrity Monitoring", "canonical_id": "apeiris://finance/controls/FC-07", "control_id": "FC-07", "layer": "FC", "blocking_effect": "blocks-runtime-action" }, { "id": "control:finance/FC-08", "type": "Control", "label": "Financial Controls Evidence Package", "canonical_id": "apeiris://finance/controls/FC-08", "control_id": "FC-08", "layer": "FC", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/FD-01", "type": "Control", "label": "AI-Driven Decision Transparency and Auditability", "canonical_id": "apeiris://finance/controls/FD-01", "control_id": "FD-01", "layer": "FD", "blocking_effect": "blocks-runtime-action" }, { "id": "control:finance/FD-02", "type": "Control", "label": "ECOA/Reg B Adverse Action Notice for AI Decisions", "canonical_id": "apeiris://finance/controls/FD-02", "control_id": "FD-02", "layer": "FD", "blocking_effect": "blocks-runtime-action" }, { "id": "control:finance/FD-03", "type": "Control", "label": "Fair Lending AI Explainability", "canonical_id": "apeiris://finance/controls/FD-03", "control_id": "FD-03", "layer": "FD", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/FD-04", "type": "Control", "label": "Model Output Disclosure to Financial Regulators", "canonical_id": "apeiris://finance/controls/FD-04", "control_id": "FD-04", "layer": "FD", "blocking_effect": "requires-review" }, { "id": "control:finance/FD-05", "type": "Control", "label": "Financial Consumer Notification and Rights", "canonical_id": "apeiris://finance/controls/FD-05", "control_id": "FD-05", "layer": "FD", "blocking_effect": "blocks-runtime-action" }, { "id": "control:finance/FD-06", "type": "Control", "label": "AI System Disclosure in Financial Filings", "canonical_id": "apeiris://finance/controls/FD-06", "control_id": "FD-06", "layer": "FD", "blocking_effect": "requires-review" }, { "id": "control:finance/FD-07", "type": "Control", "label": "Model Transparency Dashboard for Senior Management", "canonical_id": "apeiris://finance/controls/FD-07", "control_id": "FD-07", "layer": "FD", "blocking_effect": "advisory" }, { "id": "control:finance/FD-08", "type": "Control", "label": "Financial Disclosure Evidence Package", "canonical_id": "apeiris://finance/controls/FD-08", "control_id": "FD-08", "layer": "FD", "blocking_effect": "requires-review" }, { "id": "control:finance/FG-01", "type": "Control", "label": "Finance AI Governance Structure", "canonical_id": "apeiris://finance/controls/FG-01", "control_id": "FG-01", "layer": "FG", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/FG-02", "type": "Control", "label": "Senior and Named Accountability for Financial AI Decisions", "canonical_id": "apeiris://finance/controls/FG-02", "control_id": "FG-02", "layer": "FG", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/FG-03", "type": "Control", "label": "Board-Level Oversight of Financial AI Risk", "canonical_id": "apeiris://finance/controls/FG-03", "control_id": "FG-03", "layer": "FG", "blocking_effect": "requires-review" }, { "id": "control:finance/FG-04", "type": "Control", "label": "Regulatory Relationship Management", "canonical_id": "apeiris://finance/controls/FG-04", "control_id": "FG-04", "layer": "FG", "blocking_effect": "advisory" }, { "id": "control:finance/FG-05", "type": "Control", "label": "Finance AI Incident Response Integration", "canonical_id": "apeiris://finance/controls/FG-05", "control_id": "FG-05", "layer": "FG", "blocking_effect": "requires-review" }, { "id": "control:finance/FG-06", "type": "Control", "label": "Financial AI Program Metrics and Board Reporting", "canonical_id": "apeiris://finance/controls/FG-06", "control_id": "FG-06", "layer": "FG", "blocking_effect": "advisory" }, { "id": "control:finance/FG-07", "type": "Control", "label": "Annual AI Governance Review", "canonical_id": "apeiris://finance/controls/FG-07", "control_id": "FG-07", "layer": "FG", "blocking_effect": "requires-review" }, { "id": "control:finance/FG-08", "type": "Control", "label": "FinanceAttestation Production", "canonical_id": "apeiris://finance/controls/FG-08", "control_id": "FG-08", "layer": "FG", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/FP-01", "type": "Control", "label": "AI Use Policy for Financial Decision-Making", "canonical_id": "apeiris://finance/controls/FP-01", "control_id": "FP-01", "layer": "FP", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/FP-02", "type": "Control", "label": "Prohibited AI Use Cases in Financial Services", "canonical_id": "apeiris://finance/controls/FP-02", "control_id": "FP-02", "layer": "FP", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/FP-03", "type": "Control", "label": "Financial AI Risk Appetite Statement", "canonical_id": "apeiris://finance/controls/FP-03", "control_id": "FP-03", "layer": "FP", "blocking_effect": "requires-review" }, { "id": "control:finance/FP-04", "type": "Control", "label": "AI Procurement and Vendor Management Policy for Finance", "canonical_id": "apeiris://finance/controls/FP-04", "control_id": "FP-04", "layer": "FP", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/FP-05", "type": "Control", "label": "Data Governance Policy for Financial AI", "canonical_id": "apeiris://finance/controls/FP-05", "control_id": "FP-05", "layer": "FP", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/FP-06", "type": "Control", "label": "Financial AI Change Control Policy", "canonical_id": "apeiris://finance/controls/FP-06", "control_id": "FP-06", "layer": "FP", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/FP-07", "type": "Control", "label": "AI Exception and Escalation Policy", "canonical_id": "apeiris://finance/controls/FP-07", "control_id": "FP-07", "layer": "FP", "blocking_effect": "requires-review" }, { "id": "control:finance/FP-08", "type": "Control", "label": "Financial Policy Evidence Package", "canonical_id": "apeiris://finance/controls/FP-08", "control_id": "FP-08", "layer": "FP", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/MR-01", "type": "Control", "label": "SR 26-2 Model Inventory and Risk Tiering", "canonical_id": "apeiris://finance/controls/MR-01", "control_id": "MR-01", "layer": "MR", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/MR-02", "type": "Control", "label": "Model Risk Governance Policy Framework", "canonical_id": "apeiris://finance/controls/MR-02", "control_id": "MR-02", "layer": "MR", "blocking_effect": "requires-review" }, { "id": "control:finance/MR-03", "type": "Control", "label": "Pre-Deployment Model Risk Assessment", "canonical_id": "apeiris://finance/controls/MR-03", "control_id": "MR-03", "layer": "MR", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/MR-04", "type": "Control", "label": "Model Risk Appetite and Material Model Thresholds", "canonical_id": "apeiris://finance/controls/MR-04", "control_id": "MR-04", "layer": "MR", "blocking_effect": "requires-review" }, { "id": "control:finance/MR-05", "type": "Control", "label": "Ongoing Model Risk Monitoring", "canonical_id": "apeiris://finance/controls/MR-05", "control_id": "MR-05", "layer": "MR", "blocking_effect": "advisory" }, { "id": "control:finance/MR-06", "type": "Control", "label": "Third-Party and Vendor AI Model Risk Management", "canonical_id": "apeiris://finance/controls/MR-06", "control_id": "MR-06", "layer": "MR", "blocking_effect": "requires-review" }, { "id": "control:finance/MR-07", "type": "Control", "label": "Emerging Model Risk Identification", "canonical_id": "apeiris://finance/controls/MR-07", "control_id": "MR-07", "layer": "MR", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/MR-08", "type": "Control", "label": "Model Risk Evidence Package", "canonical_id": "apeiris://finance/controls/MR-08", "control_id": "MR-08", "layer": "MR", "blocking_effect": "requires-review" }, { "id": "control:finance/MV-01", "type": "Control", "label": "Independent Validation Function Charter", "canonical_id": "apeiris://finance/controls/MV-01", "control_id": "MV-01", "layer": "MV", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/MV-02", "type": "Control", "label": "Conceptual Soundness Assessment", "canonical_id": "apeiris://finance/controls/MV-02", "control_id": "MV-02", "layer": "MV", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/MV-03", "type": "Control", "label": "Outcome Analysis and Backtesting", "canonical_id": "apeiris://finance/controls/MV-03", "control_id": "MV-03", "layer": "MV", "blocking_effect": "requires-review" }, { "id": "control:finance/MV-04", "type": "Control", "label": "Benchmarking and Challenger Models", "canonical_id": "apeiris://finance/controls/MV-04", "control_id": "MV-04", "layer": "MV", "blocking_effect": "requires-review" }, { "id": "control:finance/MV-05", "type": "Control", "label": "Validation Frequency and Trigger-Based Review", "canonical_id": "apeiris://finance/controls/MV-05", "control_id": "MV-05", "layer": "MV", "blocking_effect": "requires-review" }, { "id": "control:finance/MV-06", "type": "Control", "label": "Validation Scope for AI/ML and LLM Models", "canonical_id": "apeiris://finance/controls/MV-06", "control_id": "MV-06", "layer": "MV", "blocking_effect": "blocks-deployment" }, { "id": "control:finance/MV-07", "type": "Control", "label": "Validation Finding Escalation and Remediation", "canonical_id": "apeiris://finance/controls/MV-07", "control_id": "MV-07", "layer": "MV", "blocking_effect": "requires-review" }, { "id": "control:finance/MV-08", "type": "Control", "label": "Model Validation Evidence Package", "canonical_id": "apeiris://finance/controls/MV-08", "control_id": "MV-08", "layer": "MV", "blocking_effect": "blocks-deployment" }, { "id": "control:identity/DE-01", "type": "Control", "label": "Delegation Chain Documentation", "canonical_id": "apeiris://identity/controls/DE-01", "control_id": "DE-01", "layer": "DE", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/DE-02", "type": "Control", "label": "Scope Boundary Enforcement", "canonical_id": "apeiris://identity/controls/DE-02", "control_id": "DE-02", "layer": "DE", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/DE-03", "type": "Control", "label": "Delegation Depth Limits", "canonical_id": "apeiris://identity/controls/DE-03", "control_id": "DE-03", "layer": "DE", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/DE-04", "type": "Control", "label": "Task-Scoped Delegation", "canonical_id": "apeiris://identity/controls/DE-04", "control_id": "DE-04", "layer": "DE", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/DE-05", "type": "Control", "label": "User Consent for Delegated AI Action", "canonical_id": "apeiris://identity/controls/DE-05", "control_id": "DE-05", "layer": "DE", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/DE-06", "type": "Control", "label": "Cross-Organizational Delegation Governance", "canonical_id": "apeiris://identity/controls/DE-06", "control_id": "DE-06", "layer": "DE", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/DE-07", "type": "Control", "label": "Delegation Audit Trail", "canonical_id": "apeiris://identity/controls/DE-07", "control_id": "DE-07", "layer": "DE", "blocking_effect": "advisory" }, { "id": "control:identity/DE-08", "type": "Control", "label": "Delegation Revocation Propagation", "canonical_id": "apeiris://identity/controls/DE-08", "control_id": "DE-08", "layer": "DE", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/DE-09", "type": "Control", "label": "Delegation Layer Evidence Package", "canonical_id": "apeiris://identity/controls/DE-09", "control_id": "DE-09", "layer": "DE", "blocking_effect": "blocks-deployment" }, { "id": "control:identity/IC-01", "type": "Control", "label": "Identity Governance Structure", "canonical_id": "apeiris://identity/controls/IC-01", "control_id": "IC-01", "layer": "IC", "blocking_effect": "advisory" }, { "id": "control:identity/IC-02", "type": "Control", "label": "Identity Policy and Standards", "canonical_id": "apeiris://identity/controls/IC-02", "control_id": "IC-02", "layer": "IC", "blocking_effect": "advisory" }, { "id": "control:identity/IC-03", "type": "Control", "label": "Identity Access Review", "canonical_id": "apeiris://identity/controls/IC-03", "control_id": "IC-03", "layer": "IC", "blocking_effect": "requires-review" }, { "id": "control:identity/IC-04", "type": "Control", "label": "Privileged Identity Management for AI", "canonical_id": "apeiris://identity/controls/IC-04", "control_id": "IC-04", "layer": "IC", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/IC-05", "type": "Control", "label": "Identity Compliance Mapping", "canonical_id": "apeiris://identity/controls/IC-05", "control_id": "IC-05", "layer": "IC", "blocking_effect": "advisory" }, { "id": "control:identity/IC-06", "type": "Control", "label": "Third-Party Identity Provider Audit", "canonical_id": "apeiris://identity/controls/IC-06", "control_id": "IC-06", "layer": "IC", "blocking_effect": "requires-review" }, { "id": "control:identity/IC-07", "type": "Control", "label": "Identity Program Metrics and KPIs", "canonical_id": "apeiris://identity/controls/IC-07", "control_id": "IC-07", "layer": "IC", "blocking_effect": "advisory" }, { "id": "control:identity/IC-08", "type": "Control", "label": "Identity Attestation Production", "canonical_id": "apeiris://identity/controls/IC-08", "control_id": "IC-08", "layer": "IC", "blocking_effect": "blocks-deployment" }, { "id": "control:identity/IF-01", "type": "Control", "label": "Identity Federation Trust Framework", "canonical_id": "apeiris://identity/controls/IF-01", "control_id": "IF-01", "layer": "IF", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/IF-02", "type": "Control", "label": "OIDC/OAuth Federation Configuration", "canonical_id": "apeiris://identity/controls/IF-02", "control_id": "IF-02", "layer": "IF", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/IF-03", "type": "Control", "label": "Cross-Organizational Agent Authentication", "canonical_id": "apeiris://identity/controls/IF-03", "control_id": "IF-03", "layer": "IF", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/IF-04", "type": "Control", "label": "DID-Based Cryptographic Agent Identity", "canonical_id": "apeiris://identity/controls/IF-04", "control_id": "IF-04", "layer": "IF", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/IF-05", "type": "Control", "label": "eIDAS 2.0 Qualified Attestation for EU Operations", "canonical_id": "apeiris://identity/controls/IF-05", "control_id": "IF-05", "layer": "IF", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/IF-06", "type": "Control", "label": "Token Validation and Binding", "canonical_id": "apeiris://identity/controls/IF-06", "control_id": "IF-06", "layer": "IF", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/IF-07", "type": "Control", "label": "Identity Provider Resilience and Fallback", "canonical_id": "apeiris://identity/controls/IF-07", "control_id": "IF-07", "layer": "IF", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/IF-08", "type": "Control", "label": "Cross-Domain Identity Audit Reconciliation", "canonical_id": "apeiris://identity/controls/IF-08", "control_id": "IF-08", "layer": "IF", "blocking_effect": "advisory" }, { "id": "control:identity/IF-09", "type": "Control", "label": "Identity Federation Layer Evidence Package", "canonical_id": "apeiris://identity/controls/IF-09", "control_id": "IF-09", "layer": "IF", "blocking_effect": "blocks-deployment" }, { "id": "control:identity/II-01", "type": "Control", "label": "AI Agent Identity Registry", "canonical_id": "apeiris://identity/controls/II-01", "control_id": "II-01", "layer": "II", "blocking_effect": "blocks-deployment" }, { "id": "control:identity/II-02", "type": "Control", "label": "Identity Assurance Level Assignment", "canonical_id": "apeiris://identity/controls/II-02", "control_id": "II-02", "layer": "II", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/II-03", "type": "Control", "label": "Cryptographic Identity Binding", "canonical_id": "apeiris://identity/controls/II-03", "control_id": "II-03", "layer": "II", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/II-04", "type": "Control", "label": "Hardware-Rooted Identity for High-Consequence Agents", "canonical_id": "apeiris://identity/controls/II-04", "control_id": "II-04", "layer": "II", "blocking_effect": "blocks-deployment" }, { "id": "control:identity/II-05", "type": "Control", "label": "Non-Human Identity Separation from Human Identity", "canonical_id": "apeiris://identity/controls/II-05", "control_id": "II-05", "layer": "II", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/II-06", "type": "Control", "label": "Accountable Owner Binding", "canonical_id": "apeiris://identity/controls/II-06", "control_id": "II-06", "layer": "II", "blocking_effect": "requires-review" }, { "id": "control:identity/II-07", "type": "Control", "label": "Identity Metadata, Capability Manifest and Artifact Binding", "canonical_id": "apeiris://identity/controls/II-07", "control_id": "II-07", "layer": "II", "blocking_effect": "blocks-deployment" }, { "id": "control:identity/II-08", "type": "Control", "label": "Identity Registry Integrity and Tamper Evidence", "canonical_id": "apeiris://identity/controls/II-08", "control_id": "II-08", "layer": "II", "blocking_effect": "blocks-deployment" }, { "id": "control:identity/IM-01", "type": "Control", "label": "Credential Use Baseline", "canonical_id": "apeiris://identity/controls/IM-01", "control_id": "IM-01", "layer": "IM", "blocking_effect": "advisory" }, { "id": "control:identity/IM-02", "type": "Control", "label": "Anomalous Credential Use Detection", "canonical_id": "apeiris://identity/controls/IM-02", "control_id": "IM-02", "layer": "IM", "blocking_effect": "advisory" }, { "id": "control:identity/IM-03", "type": "Control", "label": "Impossible Travel and Context Anomaly Detection", "canonical_id": "apeiris://identity/controls/IM-03", "control_id": "IM-03", "layer": "IM", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/IM-04", "type": "Control", "label": "Privilege Escalation Attempt Detection", "canonical_id": "apeiris://identity/controls/IM-04", "control_id": "IM-04", "layer": "IM", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/IM-05", "type": "Control", "label": "Credential Sharing Detection", "canonical_id": "apeiris://identity/controls/IM-05", "control_id": "IM-05", "layer": "IM", "blocking_effect": "advisory" }, { "id": "control:identity/IM-06", "type": "Control", "label": "Identity Event Log Integrity", "canonical_id": "apeiris://identity/controls/IM-06", "control_id": "IM-06", "layer": "IM", "blocking_effect": "advisory" }, { "id": "control:identity/IM-07", "type": "Control", "label": "Credential Exposure Scanning", "canonical_id": "apeiris://identity/controls/IM-07", "control_id": "IM-07", "layer": "IM", "blocking_effect": "advisory" }, { "id": "control:identity/IM-08", "type": "Control", "label": "Identity Incident Response", "canonical_id": "apeiris://identity/controls/IM-08", "control_id": "IM-08", "layer": "IM", "blocking_effect": "requires-review" }, { "id": "control:identity/IM-09", "type": "Control", "label": "Identity Monitoring Layer Evidence Package", "canonical_id": "apeiris://identity/controls/IM-09", "control_id": "IM-09", "layer": "IM", "blocking_effect": "requires-review" }, { "id": "control:identity/NI-01", "type": "Control", "label": "Identity Provisioning Gate", "canonical_id": "apeiris://identity/controls/NI-01", "control_id": "NI-01", "layer": "NI", "blocking_effect": "blocks-deployment" }, { "id": "control:identity/NI-02", "type": "Control", "label": "Credential Issuance and Minimum Privilege", "canonical_id": "apeiris://identity/controls/NI-02", "control_id": "NI-02", "layer": "NI", "blocking_effect": "blocks-deployment" }, { "id": "control:identity/NI-03", "type": "Control", "label": "Credential Lifetime and Forced Rotation", "canonical_id": "apeiris://identity/controls/NI-03", "control_id": "NI-03", "layer": "NI", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/NI-04", "type": "Control", "label": "Just-In-Time Credential Issuance", "canonical_id": "apeiris://identity/controls/NI-04", "control_id": "NI-04", "layer": "NI", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/NI-05", "type": "Control", "label": "Identity Deprovisioning and Revocation", "canonical_id": "apeiris://identity/controls/NI-05", "control_id": "NI-05", "layer": "NI", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/NI-06", "type": "Control", "label": "Ghost Identity Detection and Remediation", "canonical_id": "apeiris://identity/controls/NI-06", "control_id": "NI-06", "layer": "NI", "blocking_effect": "advisory" }, { "id": "control:identity/NI-07", "type": "Control", "label": "Credential Storage and Secrets Hygiene", "canonical_id": "apeiris://identity/controls/NI-07", "control_id": "NI-07", "layer": "NI", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/NI-08", "type": "Control", "label": "Break-Glass Identity and Emergency Access", "canonical_id": "apeiris://identity/controls/NI-08", "control_id": "NI-08", "layer": "NI", "blocking_effect": "blocks-runtime-action" }, { "id": "control:identity/NI-09", "type": "Control", "label": "Non-Human Identity Layer Evidence Package", "canonical_id": "apeiris://identity/controls/NI-09", "control_id": "NI-09", "layer": "NI", "blocking_effect": "blocks-deployment" }, { "id": "control:knowledge/KC-01", "type": "Control", "label": "Knowledge Staleness Classification Policy", "canonical_id": "apeiris://knowledge/controls/KC-01", "control_id": "KC-01", "layer": "KC", "blocking_effect": "requires-review" }, { "id": "control:knowledge/KC-02", "type": "Control", "label": "Automated Staleness Detection", "canonical_id": "apeiris://knowledge/controls/KC-02", "control_id": "KC-02", "layer": "KC", "blocking_effect": "advisory" }, { "id": "control:knowledge/KC-03", "type": "Control", "label": "Knowledge Refresh Scheduling and Execution", "canonical_id": "apeiris://knowledge/controls/KC-03", "control_id": "KC-03", "layer": "KC", "blocking_effect": "requires-review" }, { "id": "control:knowledge/KC-04", "type": "Control", "label": "Knowledge Version Control and Change History", "canonical_id": "apeiris://knowledge/controls/KC-04", "control_id": "KC-04", "layer": "KC", "blocking_effect": "advisory" }, { "id": "control:knowledge/KC-05", "type": "Control", "label": "Knowledge Cutoff Date Disclosure to Users", "canonical_id": "apeiris://knowledge/controls/KC-05", "control_id": "KC-05", "layer": "KC", "blocking_effect": "advisory" }, { "id": "control:knowledge/KC-06", "type": "Control", "label": "Domain-Specific Currency Requirements", "canonical_id": "apeiris://knowledge/controls/KC-06", "control_id": "KC-06", "layer": "KC", "blocking_effect": "advisory" }, { "id": "control:knowledge/KC-07", "type": "Control", "label": "Emergency Knowledge Update Procedures", "canonical_id": "apeiris://knowledge/controls/KC-07", "control_id": "KC-07", "layer": "KC", "blocking_effect": "requires-review" }, { "id": "control:knowledge/KC-08", "type": "Control", "label": "Knowledge Currency Evidence Package", "canonical_id": "apeiris://knowledge/controls/KC-08", "control_id": "KC-08", "layer": "KC", "blocking_effect": "advisory" }, { "id": "control:knowledge/KG-01", "type": "Control", "label": "Knowledge Governance Structure", "canonical_id": "apeiris://knowledge/controls/KG-01", "control_id": "KG-01", "layer": "KG", "blocking_effect": "blocks-deployment" }, { "id": "control:knowledge/KG-02", "type": "Control", "label": "AI Knowledge Substrate Policy Framework", "canonical_id": "apeiris://knowledge/controls/KG-02", "control_id": "KG-02", "layer": "KG", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KG-03", "type": "Control", "label": "Senior Accountability for Knowledge Quality and Safety", "canonical_id": "apeiris://knowledge/controls/KG-03", "control_id": "KG-03", "layer": "KG", "blocking_effect": "requires-review" }, { "id": "control:knowledge/KG-04", "type": "Control", "label": "Knowledge Risk Assessment", "canonical_id": "apeiris://knowledge/controls/KG-04", "control_id": "KG-04", "layer": "KG", "blocking_effect": "requires-review" }, { "id": "control:knowledge/KG-05", "type": "Control", "label": "External Knowledge Provider Governance", "canonical_id": "apeiris://knowledge/controls/KG-05", "control_id": "KG-05", "layer": "KG", "blocking_effect": "blocks-deployment" }, { "id": "control:knowledge/KG-06", "type": "Control", "label": "Knowledge Incident Response", "canonical_id": "apeiris://knowledge/controls/KG-06", "control_id": "KG-06", "layer": "KG", "blocking_effect": "requires-review" }, { "id": "control:knowledge/KG-07", "type": "Control", "label": "Knowledge Program Metrics and Effectiveness Reporting", "canonical_id": "apeiris://knowledge/controls/KG-07", "control_id": "KG-07", "layer": "KG", "blocking_effect": "advisory" }, { "id": "control:knowledge/KG-08", "type": "Control", "label": "KnowledgeAttestation Production", "canonical_id": "apeiris://knowledge/controls/KG-08", "control_id": "KG-08", "layer": "KG", "blocking_effect": "blocks-deployment" }, { "id": "control:knowledge/KI-01", "type": "Control", "label": "Ingestion Pipeline Authorization", "canonical_id": "apeiris://knowledge/controls/KI-01", "control_id": "KI-01", "layer": "KI", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KI-02", "type": "Control", "label": "Knowledge Poisoning Detection and Prevention", "canonical_id": "apeiris://knowledge/controls/KI-02", "control_id": "KI-02", "layer": "KI", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KI-03", "type": "Control", "label": "Ingestion Format Validation", "canonical_id": "apeiris://knowledge/controls/KI-03", "control_id": "KI-03", "layer": "KI", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KI-04", "type": "Control", "label": "Content Sensitivity Classification at Ingestion", "canonical_id": "apeiris://knowledge/controls/KI-04", "control_id": "KI-04", "layer": "KI", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KI-05", "type": "Control", "label": "Copyright and License Compliance at Ingestion", "canonical_id": "apeiris://knowledge/controls/KI-05", "control_id": "KI-05", "layer": "KI", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KI-06", "type": "Control", "label": "Pre-Ingestion Content Quality Gates", "canonical_id": "apeiris://knowledge/controls/KI-06", "control_id": "KI-06", "layer": "KI", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KI-07", "type": "Control", "label": "Ingestion Audit Trail", "canonical_id": "apeiris://knowledge/controls/KI-07", "control_id": "KI-07", "layer": "KI", "blocking_effect": "advisory" }, { "id": "control:knowledge/KI-08", "type": "Control", "label": "Knowledge Ingestion Evidence Package", "canonical_id": "apeiris://knowledge/controls/KI-08", "control_id": "KI-08", "layer": "KI", "blocking_effect": "requires-review" }, { "id": "control:knowledge/KM-01", "type": "Control", "label": "Knowledge Asset Lifecycle Governance", "canonical_id": "apeiris://knowledge/controls/KM-01", "control_id": "KM-01", "layer": "KM", "blocking_effect": "blocks-deployment" }, { "id": "control:knowledge/KM-02", "type": "Control", "label": "Knowledge Base Segmentation and Access Control", "canonical_id": "apeiris://knowledge/controls/KM-02", "control_id": "KM-02", "layer": "KM", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KM-03", "type": "Control", "label": "Knowledge Versioning and Change History", "canonical_id": "apeiris://knowledge/controls/KM-03", "control_id": "KM-03", "layer": "KM", "blocking_effect": "advisory" }, { "id": "control:knowledge/KM-04", "type": "Control", "label": "Knowledge Archival and Retention Policy", "canonical_id": "apeiris://knowledge/controls/KM-04", "control_id": "KM-04", "layer": "KM", "blocking_effect": "blocks-deployment" }, { "id": "control:knowledge/KM-05", "type": "Control", "label": "Knowledge-to-Output Lineage Tracking", "canonical_id": "apeiris://knowledge/controls/KM-05", "control_id": "KM-05", "layer": "KM", "blocking_effect": "blocks-deployment" }, { "id": "control:knowledge/KM-06", "type": "Control", "label": "Knowledge Impact Assessment Before Major Changes", "canonical_id": "apeiris://knowledge/controls/KM-06", "control_id": "KM-06", "layer": "KM", "blocking_effect": "blocks-deployment" }, { "id": "control:knowledge/KM-07", "type": "Control", "label": "Knowledge Base Performance and Quality Metrics", "canonical_id": "apeiris://knowledge/controls/KM-07", "control_id": "KM-07", "layer": "KM", "blocking_effect": "advisory" }, { "id": "control:knowledge/KM-08", "type": "Control", "label": "Knowledge Management Evidence Package", "canonical_id": "apeiris://knowledge/controls/KM-08", "control_id": "KM-08", "layer": "KM", "blocking_effect": "requires-review" }, { "id": "control:knowledge/KR-01", "type": "Control", "label": "Retrieval Relevance Quality Standards", "canonical_id": "apeiris://knowledge/controls/KR-01", "control_id": "KR-01", "layer": "KR", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KR-02", "type": "Control", "label": "Grounding Completeness Requirements", "canonical_id": "apeiris://knowledge/controls/KR-02", "control_id": "KR-02", "layer": "KR", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KR-03", "type": "Control", "label": "Citation Fidelity and Accuracy Enforcement", "canonical_id": "apeiris://knowledge/controls/KR-03", "control_id": "KR-03", "layer": "KR", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KR-04", "type": "Control", "label": "Retrieval Hallucination Detection", "canonical_id": "apeiris://knowledge/controls/KR-04", "control_id": "KR-04", "layer": "KR", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KR-05", "type": "Control", "label": "Retrieval Permission Verification", "canonical_id": "apeiris://knowledge/controls/KR-05", "control_id": "KR-05", "layer": "KR", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KR-06", "type": "Control", "label": "Retrieval Performance Monitoring", "canonical_id": "apeiris://knowledge/controls/KR-06", "control_id": "KR-06", "layer": "KR", "blocking_effect": "advisory" }, { "id": "control:knowledge/KR-07", "type": "Control", "label": "Retrieval Audit Trail", "canonical_id": "apeiris://knowledge/controls/KR-07", "control_id": "KR-07", "layer": "KR", "blocking_effect": "advisory" }, { "id": "control:knowledge/KR-08", "type": "Control", "label": "Knowledge Retrieval Evidence Package", "canonical_id": "apeiris://knowledge/controls/KR-08", "control_id": "KR-08", "layer": "KR", "blocking_effect": "blocks-deployment" }, { "id": "control:knowledge/KR-09", "type": "Control", "label": "Embedding and Vector-Store Integrity", "canonical_id": "apeiris://knowledge/controls/KR-09", "control_id": "KR-09", "layer": "KR", "blocking_effect": "requires-review" }, { "id": "control:knowledge/KS-01", "type": "Control", "label": "Knowledge Source Authorization Register", "canonical_id": "apeiris://knowledge/controls/KS-01", "control_id": "KS-01", "layer": "KS", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KS-02", "type": "Control", "label": "Source Authority Classification", "canonical_id": "apeiris://knowledge/controls/KS-02", "control_id": "KS-02", "layer": "KS", "blocking_effect": "advisory" }, { "id": "control:knowledge/KS-03", "type": "Control", "label": "Source Currency and Maximum Age Policy", "canonical_id": "apeiris://knowledge/controls/KS-03", "control_id": "KS-03", "layer": "KS", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KS-04", "type": "Control", "label": "Source Provenance Documentation", "canonical_id": "apeiris://knowledge/controls/KS-04", "control_id": "KS-04", "layer": "KS", "blocking_effect": "blocks-deployment" }, { "id": "control:knowledge/KS-05", "type": "Control", "label": "Competing Source Conflict Resolution", "canonical_id": "apeiris://knowledge/controls/KS-05", "control_id": "KS-05", "layer": "KS", "blocking_effect": "requires-review" }, { "id": "control:knowledge/KS-06", "type": "Control", "label": "Knowledge Domain Boundary Definition", "canonical_id": "apeiris://knowledge/controls/KS-06", "control_id": "KS-06", "layer": "KS", "blocking_effect": "blocks-runtime-action" }, { "id": "control:knowledge/KS-07", "type": "Control", "label": "Source Attribution and Citation Disclosure Requirements", "canonical_id": "apeiris://knowledge/controls/KS-07", "control_id": "KS-07", "layer": "KS", "blocking_effect": "advisory" }, { "id": "control:knowledge/KS-08", "type": "Control", "label": "Knowledge Sources Evidence Package", "canonical_id": "apeiris://knowledge/controls/KS-08", "control_id": "KS-08", "layer": "KS", "blocking_effect": "blocks-deployment" }, { "id": "control:model/BH-01", "type": "Control", "label": "Output Anomaly Detection", "canonical_id": "apeiris://model/controls/BH-01", "control_id": "BH-01", "layer": "BH", "blocking_effect": "advisory" }, { "id": "control:model/BH-02", "type": "Control", "label": "Concept and Data Drift Detection", "canonical_id": "apeiris://model/controls/BH-02", "control_id": "BH-02", "layer": "BH", "blocking_effect": "advisory" }, { "id": "control:model/BH-03", "type": "Control", "label": "Production Performance Degradation Alerting", "canonical_id": "apeiris://model/controls/BH-03", "control_id": "BH-03", "layer": "BH", "blocking_effect": "advisory" }, { "id": "control:model/BH-04", "type": "Control", "label": "Behavioral Boundary Performance Testing", "canonical_id": "apeiris://model/controls/BH-04", "control_id": "BH-04", "layer": "BH", "blocking_effect": "advisory" }, { "id": "control:model/BH-05", "type": "Control", "label": "Usage Telemetry and Decision Logging", "canonical_id": "apeiris://model/controls/BH-05", "control_id": "BH-05", "layer": "BH", "blocking_effect": "advisory" }, { "id": "control:model/BH-06", "type": "Control", "label": "Injection-Resistance Evaluation in Production", "canonical_id": "apeiris://model/controls/BH-06", "control_id": "BH-06", "layer": "BH", "blocking_effect": "blocks-deployment" }, { "id": "control:model/BH-07", "type": "Control", "label": "Resource and Cost Anomaly Monitoring", "canonical_id": "apeiris://model/controls/BH-07", "control_id": "BH-07", "layer": "BH", "blocking_effect": "advisory" }, { "id": "control:model/BH-08", "type": "Control", "label": "Shadow and Canary Deployment Governance", "canonical_id": "apeiris://model/controls/BH-08", "control_id": "BH-08", "layer": "BH", "blocking_effect": "blocks-deployment" }, { "id": "control:model/BH-09", "type": "Control", "label": "Synthetic-Content Provenance, Disclosure and Traceability", "canonical_id": "apeiris://model/controls/BH-09", "control_id": "BH-09", "layer": "BH", "blocking_effect": "blocks-runtime-action" }, { "id": "control:model/BH-10", "type": "Control", "label": "Feedback Loop Integrity and Online Learning Governance", "canonical_id": "apeiris://model/controls/BH-10", "control_id": "BH-10", "layer": "BH", "blocking_effect": "blocks-runtime-action" }, { "id": "control:model/CR-01", "type": "Control", "label": "Continuous Production Monitoring and Risk Aggregation", "canonical_id": "apeiris://model/controls/CR-01", "control_id": "CR-01", "layer": "CR", "blocking_effect": "advisory" }, { "id": "control:model/CR-02", "type": "Control", "label": "Model Evidence Archive and Audit Trail", "canonical_id": "apeiris://model/controls/CR-02", "control_id": "CR-02", "layer": "CR", "blocking_effect": "blocks-deployment" }, { "id": "control:model/CR-03", "type": "Control", "label": "Scheduled Model Re-validation", "canonical_id": "apeiris://model/controls/CR-03", "control_id": "CR-03", "layer": "CR", "blocking_effect": "blocks-deployment" }, { "id": "control:model/CR-04", "type": "Control", "label": "AI Incident Response Management", "canonical_id": "apeiris://model/controls/CR-04", "control_id": "CR-04", "layer": "CR", "blocking_effect": "blocks-deployment" }, { "id": "control:model/CR-05", "type": "Control", "label": "Regulatory Notification and Statutory Reporting", "canonical_id": "apeiris://model/controls/CR-05", "control_id": "CR-05", "layer": "CR", "blocking_effect": "blocks-deployment" }, { "id": "control:model/CR-06", "type": "Control", "label": "Post-Market Surveillance", "canonical_id": "apeiris://model/controls/CR-06", "control_id": "CR-06", "layer": "CR", "blocking_effect": "advisory" }, { "id": "control:model/CR-07", "type": "Control", "label": "Model Retirement and Evidence Archival", "canonical_id": "apeiris://model/controls/CR-07", "control_id": "CR-07", "layer": "CR", "blocking_effect": "blocks-deployment" }, { "id": "control:model/CR-08", "type": "Control", "label": "Cross-Domain Assurance Coordination", "canonical_id": "apeiris://model/controls/CR-08", "control_id": "CR-08", "layer": "CR", "blocking_effect": "advisory" }, { "id": "control:model/EV-01", "type": "Control", "label": "Pre-Deployment Evaluation Gate", "canonical_id": "apeiris://model/controls/EV-01", "control_id": "EV-01", "layer": "EV", "blocking_effect": "blocks-deployment" }, { "id": "control:model/EV-02", "type": "Control", "label": "Fitness, Safety, Reliability and Policy-Conformance Evaluation", "canonical_id": "apeiris://model/controls/EV-02", "control_id": "EV-02", "layer": "EV", "blocking_effect": "blocks-deployment" }, { "id": "control:model/EV-03", "type": "Control", "label": "Dangerous Capability Threshold Assessment", "canonical_id": "apeiris://model/controls/EV-03", "control_id": "EV-03", "layer": "EV", "blocking_effect": "blocks-deployment" }, { "id": "control:model/EV-04", "type": "Control", "label": "Adversarial Red-Team Testing", "canonical_id": "apeiris://model/controls/EV-04", "control_id": "EV-04", "layer": "EV", "blocking_effect": "blocks-deployment" }, { "id": "control:model/EV-05", "type": "Control", "label": "Fairness and Bias Evaluation", "canonical_id": "apeiris://model/controls/EV-05", "control_id": "EV-05", "layer": "EV", "blocking_effect": "blocks-deployment" }, { "id": "control:model/EV-06", "type": "Control", "label": "Reproducible Evaluation Design", "canonical_id": "apeiris://model/controls/EV-06", "control_id": "EV-06", "layer": "EV", "blocking_effect": "blocks-deployment" }, { "id": "control:model/EV-07", "type": "Control", "label": "Regression Testing on Updates", "canonical_id": "apeiris://model/controls/EV-07", "control_id": "EV-07", "layer": "EV", "blocking_effect": "blocks-deployment" }, { "id": "control:model/EV-08", "type": "Control", "label": "Independent Validation", "canonical_id": "apeiris://model/controls/EV-08", "control_id": "EV-08", "layer": "EV", "blocking_effect": "blocks-deployment" }, { "id": "control:model/EV-09", "type": "Control", "label": "Risk and Applicability Classification", "canonical_id": "apeiris://model/controls/EV-09", "control_id": "EV-09", "layer": "EV", "blocking_effect": "blocks-deployment" }, { "id": "control:model/EV-10", "type": "Control", "label": "Evaluation Result Provenance", "canonical_id": "apeiris://model/controls/EV-10", "control_id": "EV-10", "layer": "EV", "blocking_effect": "blocks-deployment" }, { "id": "control:model/EV-11", "type": "Control", "label": "Backdoor and Trojan Detection Scanning", "canonical_id": "apeiris://model/controls/EV-11", "control_id": "EV-11", "layer": "EV", "blocking_effect": "blocks-deployment" }, { "id": "control:model/EV-12", "type": "Control", "label": "Model Inversion and Reconstruction Resistance", "canonical_id": "apeiris://model/controls/EV-12", "control_id": "EV-12", "layer": "EV", "blocking_effect": "requires-review" }, { "id": "control:model/EV-13", "type": "Control", "label": "Training-Data Memorization and Regurgitation Testing", "canonical_id": "apeiris://model/controls/EV-13", "control_id": "EV-13", "layer": "EV", "blocking_effect": "requires-review" }, { "id": "control:model/LI-01", "type": "Control", "label": "Unique Model Identity and Content-Addressed Version Hash", "canonical_id": "apeiris://model/controls/LI-01", "control_id": "LI-01", "layer": "LI", "blocking_effect": "blocks-deployment" }, { "id": "control:model/LI-02", "type": "Control", "label": "Model Provenance Chain \u2014 Base Model, Fine-Tune, Merge, and Adapter Lineage", "canonical_id": "apeiris://model/controls/LI-02", "control_id": "LI-02", "layer": "LI", "blocking_effect": "blocks-deployment" }, { "id": "control:model/LI-03", "type": "Control", "label": "Supply Chain Integrity \u2014 Third-Party Model Verification and Cryptographic...", "canonical_id": "apeiris://model/controls/LI-03", "control_id": "LI-03", "layer": "LI", "blocking_effect": "blocks-deployment" }, { "id": "control:model/LI-04", "type": "Control", "label": "Structured Model Documentation \u2014 Complete Model Card with All Required Sections", "canonical_id": "apeiris://model/controls/LI-04", "control_id": "LI-04", "layer": "LI", "blocking_effect": "blocks-deployment" }, { "id": "control:model/LI-05", "type": "Control", "label": "Training Data Lineage Pointer \u2014 Link from Model Registry to TG-Layer Dataset...", "canonical_id": "apeiris://model/controls/LI-05", "control_id": "LI-05", "layer": "LI", "blocking_effect": "blocks-deployment" }, { "id": "control:model/LI-06", "type": "Control", "label": "Immutable Version Control with Tested Rollback and Emergency Disable", "canonical_id": "apeiris://model/controls/LI-06", "control_id": "LI-06", "layer": "LI", "blocking_effect": "blocks-deployment" }, { "id": "control:model/LI-07", "type": "Control", "label": "Capability and Limitation Declaration \u2014 Intended Use, Constraints,...", "canonical_id": "apeiris://model/controls/LI-07", "control_id": "LI-07", "layer": "LI", "blocking_effect": "blocks-deployment" }, { "id": "control:model/LI-08", "type": "Control", "label": "License and IP Governance \u2014 Dataset License Tracking, Derivative Work...", "canonical_id": "apeiris://model/controls/LI-08", "control_id": "LI-08", "layer": "LI", "blocking_effect": "blocks-deployment" }, { "id": "control:model/LI-09", "type": "Control", "label": "Material-Change Determination and Authorization Gate", "canonical_id": "apeiris://model/controls/LI-09", "control_id": "LI-09", "layer": "LI", "blocking_effect": "blocks-deployment" }, { "id": "control:model/LI-10", "type": "Control", "label": "Model Retirement and Archive Policy \u2014 End-of-Life Procedure, Evidence...", "canonical_id": "apeiris://model/controls/LI-10", "control_id": "LI-10", "layer": "LI", "blocking_effect": "requires-review" }, { "id": "control:model/OA-01", "type": "Control", "label": "Model Ownership Assignment", "canonical_id": "apeiris://model/controls/OA-01", "control_id": "OA-01", "layer": "OA", "blocking_effect": "blocks-deployment" }, { "id": "control:model/OA-02", "type": "Control", "label": "Meaningful Human Oversight for High-Stakes Decisions", "canonical_id": "apeiris://model/controls/OA-02", "control_id": "OA-02", "layer": "OA", "blocking_effect": "blocks-runtime-action" }, { "id": "control:model/OA-03", "type": "Control", "label": "AI Model Governance Committee", "canonical_id": "apeiris://model/controls/OA-03", "control_id": "OA-03", "layer": "OA", "blocking_effect": "blocks-deployment" }, { "id": "control:model/OA-04", "type": "Control", "label": "Delegated Autonomy Tier Governance", "canonical_id": "apeiris://model/controls/OA-04", "control_id": "OA-04", "layer": "OA", "blocking_effect": "blocks-deployment" }, { "id": "control:model/OA-05", "type": "Control", "label": "Regulatory and Legal Review Sign-Off", "canonical_id": "apeiris://model/controls/OA-05", "control_id": "OA-05", "layer": "OA", "blocking_effect": "blocks-deployment" }, { "id": "control:model/OA-06", "type": "Control", "label": "Third-Party Model and Vendor Risk Oversight", "canonical_id": "apeiris://model/controls/OA-06", "control_id": "OA-06", "layer": "OA", "blocking_effect": "blocks-deployment" }, { "id": "control:model/OA-07", "type": "Control", "label": "Incident Escalation Authority Chain", "canonical_id": "apeiris://model/controls/OA-07", "control_id": "OA-07", "layer": "OA", "blocking_effect": "blocks-deployment" }, { "id": "control:model/OA-08", "type": "Control", "label": "Notice, Explanation Support, Human Review and Contestability", "canonical_id": "apeiris://model/controls/OA-08", "control_id": "OA-08", "layer": "OA", "blocking_effect": "requires-review" }, { "id": "control:model/TG-01", "type": "Control", "label": "Training Data Quality Gates", "canonical_id": "apeiris://model/controls/TG-01", "control_id": "TG-01", "layer": "TG", "blocking_effect": "blocks-deployment" }, { "id": "control:model/TG-02", "type": "Control", "label": "Bias and Representativeness Assessment", "canonical_id": "apeiris://model/controls/TG-02", "control_id": "TG-02", "layer": "TG", "blocking_effect": "blocks-deployment" }, { "id": "control:model/TG-03", "type": "Control", "label": "Data Rights, Lawful Authority and Permitted Use", "canonical_id": "apeiris://model/controls/TG-03", "control_id": "TG-03", "layer": "TG", "blocking_effect": "blocks-deployment" }, { "id": "control:model/TG-04", "type": "Control", "label": "Data Poisoning Prevention", "canonical_id": "apeiris://model/controls/TG-04", "control_id": "TG-04", "layer": "TG", "blocking_effect": "blocks-deployment" }, { "id": "control:model/TG-05", "type": "Control", "label": "Train/Evaluation/Test Separation and Contamination Prevention", "canonical_id": "apeiris://model/controls/TG-05", "control_id": "TG-05", "layer": "TG", "blocking_effect": "blocks-deployment" }, { "id": "control:model/TG-06", "type": "Control", "label": "Sensitive-Data Necessity, Minimization and Controlled Use", "canonical_id": "apeiris://model/controls/TG-06", "control_id": "TG-06", "layer": "TG", "blocking_effect": "blocks-deployment" }, { "id": "control:model/TG-07", "type": "Control", "label": "Third-Party Dataset Governance", "canonical_id": "apeiris://model/controls/TG-07", "control_id": "TG-07", "layer": "TG", "blocking_effect": "blocks-deployment" }, { "id": "control:model/TG-08", "type": "Control", "label": "Dataset Retention, Deletion and Lifecycle", "canonical_id": "apeiris://model/controls/TG-08", "control_id": "TG-08", "layer": "TG", "blocking_effect": "requires-review" }, { "id": "control:privacy/DC-01", "type": "Control", "label": "Personal Data Inventory", "canonical_id": "apeiris://privacy/controls/DC-01", "control_id": "DC-01", "layer": "DC", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DC-02", "type": "Control", "label": "Special Category Data Classification", "canonical_id": "apeiris://privacy/controls/DC-02", "control_id": "DC-02", "layer": "DC", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DC-03", "type": "Control", "label": "Consent Registry", "canonical_id": "apeiris://privacy/controls/DC-03", "control_id": "DC-03", "layer": "DC", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DC-04", "type": "Control", "label": "Consent Signal Validation", "canonical_id": "apeiris://privacy/controls/DC-04", "control_id": "DC-04", "layer": "DC", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DC-05", "type": "Control", "label": "Consent Withdrawal Processing", "canonical_id": "apeiris://privacy/controls/DC-05", "control_id": "DC-05", "layer": "DC", "blocking_effect": "blocks-runtime-action" }, { "id": "control:privacy/DC-06", "type": "Control", "label": "Data Purpose Limitation Mapping", "canonical_id": "apeiris://privacy/controls/DC-06", "control_id": "DC-06", "layer": "DC", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DC-07", "type": "Control", "label": "Children's Data Controls", "canonical_id": "apeiris://privacy/controls/DC-07", "control_id": "DC-07", "layer": "DC", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DC-08", "type": "Control", "label": "Consent Change Propagation", "canonical_id": "apeiris://privacy/controls/DC-08", "control_id": "DC-08", "layer": "DC", "blocking_effect": "blocks-runtime-action" }, { "id": "control:privacy/DC-09", "type": "Control", "label": "Data Collection Layer Evidence Package", "canonical_id": "apeiris://privacy/controls/DC-09", "control_id": "DC-09", "layer": "DC", "blocking_effect": "requires-review" }, { "id": "control:privacy/DG-01", "type": "Control", "label": "Data Processing Register", "canonical_id": "apeiris://privacy/controls/DG-01", "control_id": "DG-01", "layer": "DG", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DG-02", "type": "Control", "label": "Data Processor Agreements", "canonical_id": "apeiris://privacy/controls/DG-02", "control_id": "DG-02", "layer": "DG", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DG-03", "type": "Control", "label": "International Transfer Mechanism Registry", "canonical_id": "apeiris://privacy/controls/DG-03", "control_id": "DG-03", "layer": "DG", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DG-04", "type": "Control", "label": "Transfer Impact Assessment", "canonical_id": "apeiris://privacy/controls/DG-04", "control_id": "DG-04", "layer": "DG", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DG-05", "type": "Control", "label": "DPIA Lifecycle Management", "canonical_id": "apeiris://privacy/controls/DG-05", "control_id": "DG-05", "layer": "DG", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DG-06", "type": "Control", "label": "Data Breach Response", "canonical_id": "apeiris://privacy/controls/DG-06", "control_id": "DG-06", "layer": "DG", "blocking_effect": "requires-review" }, { "id": "control:privacy/DG-07", "type": "Control", "label": "Data Retention and Deletion Schedule", "canonical_id": "apeiris://privacy/controls/DG-07", "control_id": "DG-07", "layer": "DG", "blocking_effect": "advisory" }, { "id": "control:privacy/DG-08", "type": "Control", "label": "Governance Evidence Archive", "canonical_id": "apeiris://privacy/controls/DG-08", "control_id": "DG-08", "layer": "DG", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DP-01", "type": "Control", "label": "Encryption at Rest and in Transit", "canonical_id": "apeiris://privacy/controls/DP-01", "control_id": "DP-01", "layer": "DP", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DP-02", "type": "Control", "label": "Pseudonymization Implementation", "canonical_id": "apeiris://privacy/controls/DP-02", "control_id": "DP-02", "layer": "DP", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DP-03", "type": "Control", "label": "Data Minimization Enforcement", "canonical_id": "apeiris://privacy/controls/DP-03", "control_id": "DP-03", "layer": "DP", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DP-04", "type": "Control", "label": "Inference Scope Limitation", "canonical_id": "apeiris://privacy/controls/DP-04", "control_id": "DP-04", "layer": "DP", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DP-05", "type": "Control", "label": "Output PII Scrubbing", "canonical_id": "apeiris://privacy/controls/DP-05", "control_id": "DP-05", "layer": "DP", "blocking_effect": "blocks-runtime-action" }, { "id": "control:privacy/DP-06", "type": "Control", "label": "Synthetic Data Governance", "canonical_id": "apeiris://privacy/controls/DP-06", "control_id": "DP-06", "layer": "DP", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DP-07", "type": "Control", "label": "AI Telemetry Data Controls", "canonical_id": "apeiris://privacy/controls/DP-07", "control_id": "DP-07", "layer": "DP", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/DP-08", "type": "Control", "label": "Data Protection Evidence Log", "canonical_id": "apeiris://privacy/controls/DP-08", "control_id": "DP-08", "layer": "DP", "blocking_effect": "advisory" }, { "id": "control:privacy/DS-01", "type": "Control", "label": "Rights Request Reception", "canonical_id": "apeiris://privacy/controls/DS-01", "control_id": "DS-01", "layer": "DS", "blocking_effect": "requires-review" }, { "id": "control:privacy/DS-02", "type": "Control", "label": "Identity Verification for Rights Requests", "canonical_id": "apeiris://privacy/controls/DS-02", "control_id": "DS-02", "layer": "DS", "blocking_effect": "blocks-runtime-action" }, { "id": "control:privacy/DS-03", "type": "Control", "label": "Access Request Fulfillment", "canonical_id": "apeiris://privacy/controls/DS-03", "control_id": "DS-03", "layer": "DS", "blocking_effect": "requires-review" }, { "id": "control:privacy/DS-04", "type": "Control", "label": "Erasure and Anonymization", "canonical_id": "apeiris://privacy/controls/DS-04", "control_id": "DS-04", "layer": "DS", "blocking_effect": "requires-review" }, { "id": "control:privacy/DS-05", "type": "Control", "label": "Automated Decision Explanation Rights", "canonical_id": "apeiris://privacy/controls/DS-05", "control_id": "DS-05", "layer": "DS", "blocking_effect": "requires-review" }, { "id": "control:privacy/DS-06", "type": "Control", "label": "Portability and Interoperability", "canonical_id": "apeiris://privacy/controls/DS-06", "control_id": "DS-06", "layer": "DS", "blocking_effect": "requires-review" }, { "id": "control:privacy/DS-07", "type": "Control", "label": "Objection and Restriction Processing", "canonical_id": "apeiris://privacy/controls/DS-07", "control_id": "DS-07", "layer": "DS", "blocking_effect": "blocks-runtime-action" }, { "id": "control:privacy/DS-08", "type": "Control", "label": "Rights Request Evidence Log", "canonical_id": "apeiris://privacy/controls/DS-08", "control_id": "DS-08", "layer": "DS", "blocking_effect": "advisory" }, { "id": "control:privacy/PC-01", "type": "Control", "label": "Regulatory Obligation Mapping", "canonical_id": "apeiris://privacy/controls/PC-01", "control_id": "PC-01", "layer": "PC", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/PC-02", "type": "Control", "label": "Privacy Certification Program", "canonical_id": "apeiris://privacy/controls/PC-02", "control_id": "PC-02", "layer": "PC", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/PC-03", "type": "Control", "label": "Jurisdiction-Specific Compliance Package", "canonical_id": "apeiris://privacy/controls/PC-03", "control_id": "PC-03", "layer": "PC", "blocking_effect": "advisory" }, { "id": "control:privacy/PC-04", "type": "Control", "label": "Privacy Program Effectiveness Assessment", "canonical_id": "apeiris://privacy/controls/PC-04", "control_id": "PC-04", "layer": "PC", "blocking_effect": "requires-review" }, { "id": "control:privacy/PC-05", "type": "Control", "label": "Privacy-by-Design Certification", "canonical_id": "apeiris://privacy/controls/PC-05", "control_id": "PC-05", "layer": "PC", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/PC-06", "type": "Control", "label": "AI Privacy Impact Assessment", "canonical_id": "apeiris://privacy/controls/PC-06", "control_id": "PC-06", "layer": "PC", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/PC-07", "type": "Control", "label": "Privacy Governance Reporting", "canonical_id": "apeiris://privacy/controls/PC-07", "control_id": "PC-07", "layer": "PC", "blocking_effect": "advisory" }, { "id": "control:privacy/PC-08", "type": "Control", "label": "PrivacyAttestation [BASELINE]", "canonical_id": "apeiris://privacy/controls/PC-08", "control_id": "PC-08", "layer": "PC", "blocking_effect": "blocks-deployment" }, { "id": "control:privacy/PM-01", "type": "Control", "label": "Privacy Incident Detection", "canonical_id": "apeiris://privacy/controls/PM-01", "control_id": "PM-01", "layer": "PM", "blocking_effect": "advisory" }, { "id": "control:privacy/PM-02", "type": "Control", "label": "Cross-Context Inference Monitoring", "canonical_id": "apeiris://privacy/controls/PM-02", "control_id": "PM-02", "layer": "PM", "blocking_effect": "requires-review" }, { "id": "control:privacy/PM-03", "type": "Control", "label": "Purpose Creep Detection", "canonical_id": "apeiris://privacy/controls/PM-03", "control_id": "PM-03", "layer": "PM", "blocking_effect": "requires-review" }, { "id": "control:privacy/PM-04", "type": "Control", "label": "Consent State Consistency Monitoring", "canonical_id": "apeiris://privacy/controls/PM-04", "control_id": "PM-04", "layer": "PM", "blocking_effect": "advisory" }, { "id": "control:privacy/PM-05", "type": "Control", "label": "Inference Log Monitoring", "canonical_id": "apeiris://privacy/controls/PM-05", "control_id": "PM-05", "layer": "PM", "blocking_effect": "advisory" }, { "id": "control:privacy/PM-06", "type": "Control", "label": "Privacy Breach Notification Management", "canonical_id": "apeiris://privacy/controls/PM-06", "control_id": "PM-06", "layer": "PM", "blocking_effect": "requires-review" }, { "id": "control:privacy/PM-07", "type": "Control", "label": "Third-Party Privacy Monitoring", "canonical_id": "apeiris://privacy/controls/PM-07", "control_id": "PM-07", "layer": "PM", "blocking_effect": "advisory" }, { "id": "control:privacy/PM-08", "type": "Control", "label": "Privacy Monitoring Evidence Archive", "canonical_id": "apeiris://privacy/controls/PM-08", "control_id": "PM-08", "layer": "PM", "blocking_effect": "advisory" }, { "id": "control:resilience/FO-01", "type": "Control", "label": "Graceful Degradation Design Patterns", "canonical_id": "apeiris://resilience/controls/FO-01", "control_id": "FO-01", "layer": "FO", "blocking_effect": "advisory" }, { "id": "control:resilience/FO-02", "type": "Control", "label": "Circuit Breaker Implementation for AI Integrations", "canonical_id": "apeiris://resilience/controls/FO-02", "control_id": "FO-02", "layer": "FO", "blocking_effect": "advisory" }, { "id": "control:resilience/FO-03", "type": "Control", "label": "Fallback Behavior Governance", "canonical_id": "apeiris://resilience/controls/FO-03", "control_id": "FO-03", "layer": "FO", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/FO-04", "type": "Control", "label": "Input Validation and Malformed Request Handling", "canonical_id": "apeiris://resilience/controls/FO-04", "control_id": "FO-04", "layer": "FO", "blocking_effect": "blocks-runtime-action" }, { "id": "control:resilience/FO-05", "type": "Control", "label": "Cascade Failure Prevention in Multi-Agent Pipelines", "canonical_id": "apeiris://resilience/controls/FO-05", "control_id": "FO-05", "layer": "FO", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/FO-06", "type": "Control", "label": "Load Shedding and Backpressure Mechanisms", "canonical_id": "apeiris://resilience/controls/FO-06", "control_id": "FO-06", "layer": "FO", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/FO-07", "type": "Control", "label": "Fault Tolerance Test Coverage", "canonical_id": "apeiris://resilience/controls/FO-07", "control_id": "FO-07", "layer": "FO", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/FO-08", "type": "Control", "label": "Fault Tolerance Evidence Package", "canonical_id": "apeiris://resilience/controls/FO-08", "control_id": "FO-08", "layer": "FO", "blocking_effect": "requires-review" }, { "id": "control:resilience/RE-01", "type": "Control", "label": "High Availability Architecture for AI Systems", "canonical_id": "apeiris://resilience/controls/RE-01", "control_id": "RE-01", "layer": "RE", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/RE-02", "type": "Control", "label": "Stateless Agent Design and Session Recovery", "canonical_id": "apeiris://resilience/controls/RE-02", "control_id": "RE-02", "layer": "RE", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/RE-03", "type": "Control", "label": "Data Redundancy and Backup Governance", "canonical_id": "apeiris://resilience/controls/RE-03", "control_id": "RE-03", "layer": "RE", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/RE-04", "type": "Control", "label": "Infrastructure-as-Code for Reproducible Recovery", "canonical_id": "apeiris://resilience/controls/RE-04", "control_id": "RE-04", "layer": "RE", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/RE-05", "type": "Control", "label": "Dependency Isolation and Bulkhead Patterns", "canonical_id": "apeiris://resilience/controls/RE-05", "control_id": "RE-05", "layer": "RE", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/RE-06", "type": "Control", "label": "DORA Compliance Architecture for AI Systems", "canonical_id": "apeiris://resilience/controls/RE-06", "control_id": "RE-06", "layer": "RE", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/RE-07", "type": "Control", "label": "Resilience Engineering Review in Development Lifecycle", "canonical_id": "apeiris://resilience/controls/RE-07", "control_id": "RE-07", "layer": "RE", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/RE-08", "type": "Control", "label": "Resilience Engineering Evidence Package", "canonical_id": "apeiris://resilience/controls/RE-08", "control_id": "RE-08", "layer": "RE", "blocking_effect": "requires-review" }, { "id": "control:resilience/RG-01", "type": "Control", "label": "Resilience Governance Structure", "canonical_id": "apeiris://resilience/controls/RG-01", "control_id": "RG-01", "layer": "RG", "blocking_effect": "requires-review" }, { "id": "control:resilience/RG-02", "type": "Control", "label": "Resilience Policy Framework", "canonical_id": "apeiris://resilience/controls/RG-02", "control_id": "RG-02", "layer": "RG", "blocking_effect": "advisory" }, { "id": "control:resilience/RG-03", "type": "Control", "label": "Senior Accountability for AI Operational Resilience", "canonical_id": "apeiris://resilience/controls/RG-03", "control_id": "RG-03", "layer": "RG", "blocking_effect": "requires-review" }, { "id": "control:resilience/RG-04", "type": "Control", "label": "Resilience Risk Appetite and Threshold Setting", "canonical_id": "apeiris://resilience/controls/RG-04", "control_id": "RG-04", "layer": "RG", "blocking_effect": "requires-review" }, { "id": "control:resilience/RG-05", "type": "Control", "label": "Resilience Program Resourcing", "canonical_id": "apeiris://resilience/controls/RG-05", "control_id": "RG-05", "layer": "RG", "blocking_effect": "requires-review" }, { "id": "control:resilience/RG-06", "type": "Control", "label": "Resilience Incident Response Integration", "canonical_id": "apeiris://resilience/controls/RG-06", "control_id": "RG-06", "layer": "RG", "blocking_effect": "requires-review" }, { "id": "control:resilience/RG-07", "type": "Control", "label": "Resilience Program Metrics and Board Reporting", "canonical_id": "apeiris://resilience/controls/RG-07", "control_id": "RG-07", "layer": "RG", "blocking_effect": "advisory" }, { "id": "control:resilience/RG-08", "type": "Control", "label": "ResilienceAttestation Production", "canonical_id": "apeiris://resilience/controls/RG-08", "control_id": "RG-08", "layer": "RG", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/RO-01", "type": "Control", "label": "AI System Failover Execution Procedures", "canonical_id": "apeiris://resilience/controls/RO-01", "control_id": "RO-01", "layer": "RO", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/RO-02", "type": "Control", "label": "Model Rollback Execution and Validation", "canonical_id": "apeiris://resilience/controls/RO-02", "control_id": "RO-02", "layer": "RO", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/RO-03", "type": "Control", "label": "Data Recovery and Integrity Verification Post-Incident", "canonical_id": "apeiris://resilience/controls/RO-03", "control_id": "RO-03", "layer": "RO", "blocking_effect": "blocks-runtime-action" }, { "id": "control:resilience/RO-04", "type": "Control", "label": "Recovery Operations Communication Protocol", "canonical_id": "apeiris://resilience/controls/RO-04", "control_id": "RO-04", "layer": "RO", "blocking_effect": "requires-review" }, { "id": "control:resilience/RO-05", "type": "Control", "label": "Pre-Restoration Validation Before Traffic Resumption", "canonical_id": "apeiris://resilience/controls/RO-05", "control_id": "RO-05", "layer": "RO", "blocking_effect": "blocks-runtime-action" }, { "id": "control:resilience/RO-06", "type": "Control", "label": "Recovery Operations Audit Trail", "canonical_id": "apeiris://resilience/controls/RO-06", "control_id": "RO-06", "layer": "RO", "blocking_effect": "advisory" }, { "id": "control:resilience/RO-07", "type": "Control", "label": "Recovery Time Compliance Verification", "canonical_id": "apeiris://resilience/controls/RO-07", "control_id": "RO-07", "layer": "RO", "blocking_effect": "advisory" }, { "id": "control:resilience/RO-08", "type": "Control", "label": "Recovery Operations Evidence Package", "canonical_id": "apeiris://resilience/controls/RO-08", "control_id": "RO-08", "layer": "RO", "blocking_effect": "requires-review" }, { "id": "control:resilience/RP-01", "type": "Control", "label": "AI-Specific Business Continuity Plan", "canonical_id": "apeiris://resilience/controls/RP-01", "control_id": "RP-01", "layer": "RP", "blocking_effect": "requires-review" }, { "id": "control:resilience/RP-02", "type": "Control", "label": "AI System Disaster Recovery Plan", "canonical_id": "apeiris://resilience/controls/RP-02", "control_id": "RP-02", "layer": "RP", "blocking_effect": "requires-review" }, { "id": "control:resilience/RP-03", "type": "Control", "label": "Model Rollback and Previous Version Recovery Planning", "canonical_id": "apeiris://resilience/controls/RP-03", "control_id": "RP-03", "layer": "RP", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/RP-04", "type": "Control", "label": "RAG Index and Knowledge Base Recovery Plan", "canonical_id": "apeiris://resilience/controls/RP-04", "control_id": "RP-04", "layer": "RP", "blocking_effect": "requires-review" }, { "id": "control:resilience/RP-05", "type": "Control", "label": "Recovery Priority Classification for AI Systems", "canonical_id": "apeiris://resilience/controls/RP-05", "control_id": "RP-05", "layer": "RP", "blocking_effect": "requires-review" }, { "id": "control:resilience/RP-06", "type": "Control", "label": "Third-Party AI Provider Outage Response Plan", "canonical_id": "apeiris://resilience/controls/RP-06", "control_id": "RP-06", "layer": "RP", "blocking_effect": "requires-review" }, { "id": "control:resilience/RP-07", "type": "Control", "label": "Recovery Plan Testing and Tabletop Exercises", "canonical_id": "apeiris://resilience/controls/RP-07", "control_id": "RP-07", "layer": "RP", "blocking_effect": "requires-review" }, { "id": "control:resilience/RP-08", "type": "Control", "label": "Recovery Planning Evidence Package", "canonical_id": "apeiris://resilience/controls/RP-08", "control_id": "RP-08", "layer": "RP", "blocking_effect": "requires-review" }, { "id": "control:resilience/RV-01", "type": "Control", "label": "AI System RTO/RPO Definition and Validation", "canonical_id": "apeiris://resilience/controls/RV-01", "control_id": "RV-01", "layer": "RV", "blocking_effect": "requires-review" }, { "id": "control:resilience/RV-02", "type": "Control", "label": "Resilience Control Verification Testing", "canonical_id": "apeiris://resilience/controls/RV-02", "control_id": "RV-02", "layer": "RV", "blocking_effect": "requires-review" }, { "id": "control:resilience/RV-03", "type": "Control", "label": "Chaos Engineering for AI Systems", "canonical_id": "apeiris://resilience/controls/RV-03", "control_id": "RV-03", "layer": "RV", "blocking_effect": "advisory" }, { "id": "control:resilience/RV-04", "type": "Control", "label": "Recovery Capability Verification After Actual Incident", "canonical_id": "apeiris://resilience/controls/RV-04", "control_id": "RV-04", "layer": "RV", "blocking_effect": "requires-review" }, { "id": "control:resilience/RV-05", "type": "Control", "label": "Third-Party AI Dependency Resilience Assessment", "canonical_id": "apeiris://resilience/controls/RV-05", "control_id": "RV-05", "layer": "RV", "blocking_effect": "requires-review" }, { "id": "control:resilience/RV-06", "type": "Control", "label": "Multi-Region and Multi-AZ Resilience Verification", "canonical_id": "apeiris://resilience/controls/RV-06", "control_id": "RV-06", "layer": "RV", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/RV-07", "type": "Control", "label": "Degraded-Mode AI Operation Testing", "canonical_id": "apeiris://resilience/controls/RV-07", "control_id": "RV-07", "layer": "RV", "blocking_effect": "blocks-deployment" }, { "id": "control:resilience/RV-08", "type": "Control", "label": "Resilience Verification Evidence Package", "canonical_id": "apeiris://resilience/controls/RV-08", "control_id": "RV-08", "layer": "RV", "blocking_effect": "advisory" }, { "id": "control:security/AS-01", "type": "Control", "label": "Adversarially red-team and evaluate the agent before launch", "canonical_id": "apeiris://security/controls/AS-01", "control_id": "AS-01", "layer": "AS", "layer_name": "assurance", "blocking_effect": "blocks-deployment" }, { "id": "control:security/AS-02", "type": "Control", "label": "Statically analyze agent skills and manifests in CI", "canonical_id": "apeiris://security/controls/AS-02", "control_id": "AS-02", "layer": "AS", "layer_name": "assurance", "blocking_effect": "blocks-deployment" }, { "id": "control:security/AS-03", "type": "Control", "label": "Gate releases on continuous adversarial validation", "canonical_id": "apeiris://security/controls/AS-03", "control_id": "AS-03", "layer": "AS", "layer_name": "assurance", "blocking_effect": "blocks-deployment" }, { "id": "control:security/AS-04", "type": "Control", "label": "Run a bug-bounty / vulnerability reward program for agentic abuse", "canonical_id": "apeiris://security/controls/AS-04", "control_id": "AS-04", "layer": "AS", "layer_name": "assurance", "blocking_effect": "advisory" }, { "id": "control:security/AS-05", "type": "Control", "label": "Study frontier offensive capability before public release", "canonical_id": "apeiris://security/controls/AS-05", "control_id": "AS-05", "layer": "AS", "layer_name": "assurance", "blocking_effect": "blocks-deployment" }, { "id": "control:security/AS-06", "type": "Control", "label": "Verify model-weights and training-data provenance before load", "canonical_id": "apeiris://security/controls/AS-06", "control_id": "AS-06", "layer": "AS", "layer_name": "assurance", "blocking_effect": "blocks-deployment" }, { "id": "control:security/AS-07", "type": "Control", "label": "Verify a skill does what it declares (behavioral integrity)", "canonical_id": "apeiris://security/controls/AS-07", "control_id": "AS-07", "layer": "AS", "layer_name": "assurance", "blocking_effect": "blocks-deployment" }, { "id": "control:security/AS-08", "type": "Control", "label": "Harden and assure the security control plane as tier-zero infrastructure", "canonical_id": "apeiris://security/controls/AS-08", "control_id": "AS-08", "layer": "AS", "layer_name": "assurance", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/EC-01", "type": "Control", "label": "Run the agent in a sandbox, from process isolation up to micro-VMs", "canonical_id": "apeiris://security/controls/EC-01", "control_id": "EC-01", "layer": "EC", "layer_name": "containment", "blocking_effect": "blocks-deployment" }, { "id": "control:security/EC-02", "type": "Control", "label": "Filter the agent's outbound network traffic", "canonical_id": "apeiris://security/controls/EC-02", "control_id": "EC-02", "layer": "EC", "layer_name": "containment", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/EC-03", "type": "Control", "label": "Keep memory short-lived, and validate anything written to it", "canonical_id": "apeiris://security/controls/EC-03", "control_id": "EC-03", "layer": "EC", "layer_name": "containment", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/EC-04", "type": "Control", "label": "Limit filesystem and tool access to the bare minimum", "canonical_id": "apeiris://security/controls/EC-04", "control_id": "EC-04", "layer": "EC", "layer_name": "containment", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/EC-05", "type": "Control", "label": "Cap spend and resource use, stop denial-of-wallet", "canonical_id": "apeiris://security/controls/EC-05", "control_id": "EC-05", "layer": "EC", "layer_name": "containment", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/EC-06", "type": "Control", "label": "Contain runaway loops and over-reach (least-agency)", "canonical_id": "apeiris://security/controls/EC-06", "control_id": "EC-06", "layer": "EC", "layer_name": "containment", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/EC-07", "type": "Control", "label": "Trust-rank retrieved content before it enters the agent's context", "canonical_id": "apeiris://security/controls/EC-07", "control_id": "EC-07", "layer": "EC", "layer_name": "containment", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/EC-08", "type": "Control", "label": "Keep secrets out of the prompt and context", "canonical_id": "apeiris://security/controls/EC-08", "control_id": "EC-08", "layer": "EC", "layer_name": "containment", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/EC-09", "type": "Control", "label": "Treat the workspace and its config and hooks as untrusted", "canonical_id": "apeiris://security/controls/EC-09", "control_id": "EC-09", "layer": "EC", "layer_name": "containment", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/EC-10", "type": "Control", "label": "Verify trigger provenance and admit autonomous runs", "canonical_id": "apeiris://security/controls/EC-10", "control_id": "EC-10", "layer": "EC", "layer_name": "containment", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/EC-11", "type": "Control", "label": "AI Accelerator Firmware and Trusted Execution Integrity", "canonical_id": "apeiris://security/controls/EC-11", "control_id": "EC-11", "layer": "EC", "layer_name": "containment", "blocking_effect": "requires-review" }, { "id": "control:security/EC-12", "type": "Control", "label": "AI Serving-Stack Vulnerability Management", "canonical_id": "apeiris://security/controls/EC-12", "control_id": "EC-12", "layer": "EC", "layer_name": "containment", "blocking_effect": "blocks-deployment" }, { "id": "control:security/GV-01", "type": "Control", "label": "Require a human hard-stop for irreversible actions", "canonical_id": "apeiris://security/controls/GV-01", "control_id": "GV-01", "layer": "GV", "layer_name": "governance", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/GV-02", "type": "Control", "label": "Keep an immutable, tamper-evident audit trail of what the agent did", "canonical_id": "apeiris://security/controls/GV-02", "control_id": "GV-02", "layer": "GV", "layer_name": "governance", "blocking_effect": "advisory" }, { "id": "control:security/GV-03", "type": "Control", "label": "Define multi-agent authority and conflict resolution explicitly", "canonical_id": "apeiris://security/controls/GV-03", "control_id": "GV-03", "layer": "GV", "layer_name": "governance", "blocking_effect": "requires-review" }, { "id": "control:security/GV-04", "type": "Control", "label": "Enforce policy as code at run time, in the request path", "canonical_id": "apeiris://security/controls/GV-04", "control_id": "GV-04", "layer": "GV", "layer_name": "governance", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/GV-05", "type": "Control", "label": "Run an AI management system and tier agents by their autonomy", "canonical_id": "apeiris://security/controls/GV-05", "control_id": "GV-05", "layer": "GV", "layer_name": "governance", "blocking_effect": "blocks-deployment" }, { "id": "control:security/GV-06", "type": "Control", "label": "Cap the rate and volume of irreversible actions", "canonical_id": "apeiris://security/controls/GV-06", "control_id": "GV-06", "layer": "GV", "layer_name": "governance", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/GV-07", "type": "Control", "label": "Protect humans from being deceived by an agent", "canonical_id": "apeiris://security/controls/GV-07", "control_id": "GV-07", "layer": "GV", "layer_name": "governance", "blocking_effect": "requires-review" }, { "id": "control:security/GV-08", "type": "Control", "label": "Make high-impact actions transactional, atomic, idempotent, state-checked", "canonical_id": "apeiris://security/controls/GV-08", "control_id": "GV-08", "layer": "GV", "layer_name": "governance", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/GV-09", "type": "Control", "label": "Anchor a named business owner to every agent (accountability)", "canonical_id": "apeiris://security/controls/GV-09", "control_id": "GV-09", "layer": "GV", "layer_name": "governance", "blocking_effect": "blocks-deployment" }, { "id": "control:security/GV-10", "type": "Control", "label": "Enable end-user responsibility and guard against automation bias", "canonical_id": "apeiris://security/controls/GV-10", "control_id": "GV-10", "layer": "GV", "layer_name": "governance", "blocking_effect": "requires-review" }, { "id": "control:security/GV-11", "type": "Control", "label": "Plan recovery and compensation for actions the agent already committed", "canonical_id": "apeiris://security/controls/GV-11", "control_id": "GV-11", "layer": "GV", "layer_name": "governance", "blocking_effect": "blocks-deployment" }, { "id": "control:security/IA-01", "type": "Control", "label": "Give every agent its own distinct identity, never a shared or human login", "canonical_id": "apeiris://security/controls/IA-01", "control_id": "IA-01", "layer": "IA", "layer_name": "identity", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/IA-02", "type": "Control", "label": "Hand out short-lived, task-scoped keys (no long-lived secrets)", "canonical_id": "apeiris://security/controls/IA-02", "control_id": "IA-02", "layer": "IA", "layer_name": "identity", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/IA-03", "type": "Control", "label": "Act on the user's behalf with explicit approval for sensitive steps", "canonical_id": "apeiris://security/controls/IA-03", "control_id": "IA-03", "layer": "IA", "layer_name": "identity", "blocking_effect": "requires-review" }, { "id": "control:security/IA-04", "type": "Control", "label": "Check permission continuously at run time, not just once at login", "canonical_id": "apeiris://security/controls/IA-04", "control_id": "IA-04", "layer": "IA", "layer_name": "identity", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/IA-05", "type": "Control", "label": "Find and inventory every agent, surface the shadow ones", "canonical_id": "apeiris://security/controls/IA-05", "control_id": "IA-05", "layer": "IA", "layer_name": "identity", "blocking_effect": "advisory" }, { "id": "control:security/IA-06", "type": "Control", "label": "Bind a signed, end-to-end provenance chain to every agent action", "canonical_id": "apeiris://security/controls/IA-06", "control_id": "IA-06", "layer": "IA", "layer_name": "identity", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/PT-01", "type": "Control", "label": "Authenticate and sign agent-to-agent communication", "canonical_id": "apeiris://security/controls/PT-01", "control_id": "PT-01", "layer": "PT", "layer_name": "protocol", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/PT-02", "type": "Control", "label": "Authorize tool calls and govern the MCP server registry", "canonical_id": "apeiris://security/controls/PT-02", "control_id": "PT-02", "layer": "PT", "layer_name": "protocol", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/PT-03", "type": "Control", "label": "Verify skill/tool manifest integrity and sign the supply chain", "canonical_id": "apeiris://security/controls/PT-03", "control_id": "PT-03", "layer": "PT", "layer_name": "protocol", "blocking_effect": "blocks-deployment" }, { "id": "control:security/PT-04", "type": "Control", "label": "Validate tool input/output, treat tool results as untrusted", "canonical_id": "apeiris://security/controls/PT-04", "control_id": "PT-04", "layer": "PT", "layer_name": "protocol", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/PT-05", "type": "Control", "label": "Encode and validate the agent's own output before it reaches other systems", "canonical_id": "apeiris://security/controls/PT-05", "control_id": "PT-05", "layer": "PT", "layer_name": "protocol", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/PT-06", "type": "Control", "label": "Sanitize model-generated tool parameters, not just the schema", "canonical_id": "apeiris://security/controls/PT-06", "control_id": "PT-06", "layer": "PT", "layer_name": "protocol", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/PT-07", "type": "Control", "label": "Verify tool descriptions for hidden instructions (description injection)", "canonical_id": "apeiris://security/controls/PT-07", "control_id": "PT-07", "layer": "PT", "layer_name": "protocol", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/PT-08", "type": "Control", "label": "Enforce an instruction hierarchy so tool output cannot give the agent orders", "canonical_id": "apeiris://security/controls/PT-08", "control_id": "PT-08", "layer": "PT", "layer_name": "protocol", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/RT-01", "type": "Control", "label": "Capture OS-level telemetry of what the agent actually does", "canonical_id": "apeiris://security/controls/RT-01", "control_id": "RT-01", "layer": "RT", "layer_name": "runtime", "blocking_effect": "advisory" }, { "id": "control:security/RT-02", "type": "Control", "label": "Detect direct and indirect prompt injection at every input and output", "canonical_id": "apeiris://security/controls/RT-02", "control_id": "RT-02", "layer": "RT", "layer_name": "runtime", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/RT-03", "type": "Control", "label": "Supervise the agent's reasoning and check it matches its actions", "canonical_id": "apeiris://security/controls/RT-03", "control_id": "RT-03", "layer": "RT", "layer_name": "runtime", "blocking_effect": "requires-review" }, { "id": "control:security/RT-04", "type": "Control", "label": "Detect anomalies and trigger pause, kill switch, or containment", "canonical_id": "apeiris://security/controls/RT-04", "control_id": "RT-04", "layer": "RT", "layer_name": "runtime", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/RT-05", "type": "Control", "label": "Apply data-loss prevention to agent egress and interactions", "canonical_id": "apeiris://security/controls/RT-05", "control_id": "RT-05", "layer": "RT", "layer_name": "runtime", "blocking_effect": "blocks-runtime-action" }, { "id": "control:security/RT-06", "type": "Control", "label": "Map AI-native threats, extend ATT&CK/ATLAS to agentic orchestration", "canonical_id": "apeiris://security/controls/RT-06", "control_id": "RT-06", "layer": "RT", "layer_name": "runtime", "blocking_effect": "advisory" }, { "id": "control:security/RT-07", "type": "Control", "label": "Detect multi-agent collusion and covert channels", "canonical_id": "apeiris://security/controls/RT-07", "control_id": "RT-07", "layer": "RT", "layer_name": "runtime", "blocking_effect": "advisory" }, { "id": "control:security/RT-08", "type": "Control", "label": "Monitor latent and representation-level signals, not just visible reasoning", "canonical_id": "apeiris://security/controls/RT-08", "control_id": "RT-08", "layer": "RT", "layer_name": "runtime", "blocking_effect": "advisory" }, { "id": "domain:agentic", "type": "Domain", "label": "Apeiris Agentic Control Matrix", "slug": "agentic", "prefix": null, "controls": 50 }, { "id": "domain:authority", "type": "Domain", "label": "Apeiris Authority Control Matrix", "slug": "authority", "prefix": null, "controls": 53 }, { "id": "domain:compliance", "type": "Domain", "label": "Apeiris Compliance Control Matrix", "slug": "compliance", "prefix": null, "controls": 48 }, { "id": "domain:data", "type": "Domain", "label": "Apeiris Data Control Matrix", "slug": "data", "prefix": null, "controls": 48 }, { "id": "domain:ethics", "type": "Domain", "label": "Apeiris Ethics Control Matrix", "slug": "ethics", "prefix": null, "controls": 50 }, { "id": "domain:finance", "type": "Domain", "label": "Apeiris Finance Control Matrix", "slug": "finance", "prefix": null, "controls": 48 }, { "id": "domain:identity", "type": "Domain", "label": "Apeiris Identity Control Matrix", "slug": "identity", "prefix": null, "controls": 52 }, { "id": "domain:knowledge", "type": "Domain", "label": "Apeiris Knowledge Control Matrix", "slug": "knowledge", "prefix": null, "controls": 49 }, { "id": "domain:model", "type": "Domain", "label": "AI Model & System Assurance Control Matrix", "slug": "model", "prefix": null, "controls": 57 }, { "id": "domain:privacy", "type": "Domain", "label": "Apeiris Privacy Control Matrix", "slug": "privacy", "prefix": null, "controls": 49 }, { "id": "domain:resilience", "type": "Domain", "label": "Apeiris Resilience Control Matrix", "slug": "resilience", "prefix": null, "controls": 48 }, { "id": "domain:security", "type": "Domain", "label": "Apeiris Security Control Matrix", "slug": "security", "prefix": null, "controls": 53 }, { "id": "clause:acm_ethics:\u00a71.1", "type": "FrameworkClause", "label": "\u00a71.1", "framework": "acm_ethics" }, { "id": "clause:acm_ethics:\u00a71.1\u20131.4", "type": "FrameworkClause", "label": "\u00a71.1\u20131.4", "framework": "acm_ethics" }, { "id": "clause:acm_ethics:\u00a71.1, \u00a71.2, \u00a72.5", "type": "FrameworkClause", "label": "\u00a71.1, \u00a71.2, \u00a72.5", "framework": "acm_ethics" }, { "id": "clause:acm_ethics:\u00a71.2", "type": "FrameworkClause", "label": "\u00a71.2", "framework": "acm_ethics" }, { "id": "clause:acm_ethics:\u00a71.2, \u00a72.5", "type": "FrameworkClause", "label": "\u00a71.2, \u00a72.5", "framework": "acm_ethics" }, { "id": "clause:acm_ethics:\u00a71.4", "type": "FrameworkClause", "label": "\u00a71.4", "framework": "acm_ethics" }, { "id": "clause:acm_ethics:\u00a72.3, \u00a73.7", "type": "FrameworkClause", "label": "\u00a72.3, \u00a73.7", "framework": "acm_ethics" }, { "id": "clause:acm_ethics:\u00a72.5", "type": "FrameworkClause", "label": "\u00a72.5", "framework": "acm_ethics" }, { "id": "clause:acm_ethics:\u00a73.7", "type": "FrameworkClause", "label": "\u00a73.7", "framework": "acm_ethics" }, { "id": "clause:aicm:A&A-02", "type": "FrameworkClause", "label": "A&A-02", "framework": "aicm" }, { "id": "clause:aicm:A&A-04", "type": "FrameworkClause", "label": "A&A-04", "framework": "aicm" }, { "id": "clause:aicm:AIS-09", "type": "FrameworkClause", "label": "AIS-09", "framework": "aicm" }, { "id": "clause:aicm:CCC-02", "type": "FrameworkClause", "label": "CCC-02", "framework": "aicm" }, { "id": "clause:aicm:DSP-02", "type": "FrameworkClause", "label": "DSP-02", "framework": "aicm" }, { "id": "clause:aicm:DSP-12", "type": "FrameworkClause", "label": "DSP-12", "framework": "aicm" }, { "id": "clause:aicm:DSP-16", "type": "FrameworkClause", "label": "DSP-16", "framework": "aicm" }, { "id": "clause:aicm:DSP-20", "type": "FrameworkClause", "label": "DSP-20", "framework": "aicm" }, { "id": "clause:aicm:DSP-21", "type": "FrameworkClause", "label": "DSP-21", "framework": "aicm" }, { "id": "clause:aicm:DSP-23", "type": "FrameworkClause", "label": "DSP-23", "framework": "aicm" }, { "id": "clause:aicm:GRC-01", "type": "FrameworkClause", "label": "GRC-01", "framework": "aicm" }, { "id": "clause:aicm:GRC-02", "type": "FrameworkClause", "label": "GRC-02", "framework": "aicm" }, { "id": "clause:aicm:GRC-06", "type": "FrameworkClause", "label": "GRC-06", "framework": "aicm" }, { "id": "clause:aicm:GRC-07", "type": "FrameworkClause", "label": "GRC-07", "framework": "aicm" }, { "id": "clause:aicm:GRC-10", "type": "FrameworkClause", "label": "GRC-10", "framework": "aicm" }, { "id": "clause:aicm:GRC-11", "type": "FrameworkClause", "label": "GRC-11", "framework": "aicm" }, { "id": "clause:aicm:GRC-13", "type": "FrameworkClause", "label": "GRC-13", "framework": "aicm" }, { "id": "clause:aicm:GRC-15", "type": "FrameworkClause", "label": "GRC-15", "framework": "aicm" }, { "id": "clause:aicm:LOG-07", "type": "FrameworkClause", "label": "LOG-07", "framework": "aicm" }, { "id": "clause:aicm:LOG-10", "type": "FrameworkClause", "label": "LOG-10", "framework": "aicm" }, { "id": "clause:aicm:LOG-14", "type": "FrameworkClause", "label": "LOG-14", "framework": "aicm" }, { "id": "clause:aicm:MDS-03", "type": "FrameworkClause", "label": "MDS-03", "framework": "aicm" }, { "id": "clause:aicm:MDS-05", "type": "FrameworkClause", "label": "MDS-05", "framework": "aicm" }, { "id": "clause:aicm:MDS-10", "type": "FrameworkClause", "label": "MDS-10", "framework": "aicm" }, { "id": "clause:aicm:SEF-01", "type": "FrameworkClause", "label": "SEF-01", "framework": "aicm" }, { "id": "clause:aicm:SEF-03", "type": "FrameworkClause", "label": "SEF-03", "framework": "aicm" }, { "id": "clause:aicm:SEF-07", "type": "FrameworkClause", "label": "SEF-07", "framework": "aicm" }, { "id": "clause:aicm:STA-01", "type": "FrameworkClause", "label": "STA-01", "framework": "aicm" }, { "id": "clause:aicm:STA-08", "type": "FrameworkClause", "label": "STA-08", "framework": "aicm" }, { "id": "clause:aicm:TVM-07", "type": "FrameworkClause", "label": "TVM-07", "framework": "aicm" }, { "id": "clause:aicm:TVM-08", "type": "FrameworkClause", "label": "TVM-08", "framework": "aicm" }, { "id": "clause:aicm:TVM-13", "type": "FrameworkClause", "label": "TVM-13", "framework": "aicm" }, { "id": "clause:aisvs:C1.1", "type": "FrameworkClause", "label": "C1.1", "framework": "aisvs" }, { "id": "clause:aisvs:C1.3", "type": "FrameworkClause", "label": "C1.3", "framework": "aisvs" }, { "id": "clause:aisvs:C11.1", "type": "FrameworkClause", "label": "C11.1", "framework": "aisvs" }, { "id": "clause:aisvs:C3.1", "type": "FrameworkClause", "label": "C3.1", "framework": "aisvs" }, { "id": "clause:aisvs:C3.2", "type": "FrameworkClause", "label": "C3.2", "framework": "aisvs" }, { "id": "clause:aisvs:C6.2", "type": "FrameworkClause", "label": "C6.2", "framework": "aisvs" }, { "id": "clause:anthropic_privacy:Anthropic API data controls \u2014 configuration verification", "type": "FrameworkClause", "label": "Anthropic API data controls \u2014 configuration verification", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic API data retention controls", "type": "FrameworkClause", "label": "Anthropic API data retention controls", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic API data retention defaults", "type": "FrameworkClause", "label": "Anthropic API data retention defaults", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic API log retention controls", "type": "FrameworkClause", "label": "Anthropic API log retention controls", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic compliance artifacts \u2014 SOC 2 Type II, GDPR DPA, HI", "type": "FrameworkClause", "label": "Anthropic compliance artifacts \u2014 SOC 2 Type II, GDPR DPA, HI", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 processing on documente", "type": "FrameworkClause", "label": "Anthropic Data Processing Addendum \u2014 processing on documente", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 security incident notif", "type": "FrameworkClause", "label": "Anthropic Data Processing Addendum \u2014 security incident notif", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 Standard Contractual Cl", "type": "FrameworkClause", "label": "Anthropic Data Processing Addendum \u2014 Standard Contractual Cl", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "type": "FrameworkClause", "label": "Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 training data commitmen", "type": "FrameworkClause", "label": "Anthropic Data Processing Addendum \u2014 training data commitmen", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic Data Processing Addendum (DPA)", "type": "FrameworkClause", "label": "Anthropic Data Processing Addendum (DPA)", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic Data Processing Addendum and compliance documentat", "type": "FrameworkClause", "label": "Anthropic Data Processing Addendum and compliance documentat", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic Privacy Policy and Consumer Terms \u2014 training data", "type": "FrameworkClause", "label": "Anthropic Privacy Policy and Consumer Terms \u2014 training data", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic privacy support channels", "type": "FrameworkClause", "label": "Anthropic privacy support channels", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment capabi", "type": "FrameworkClause", "label": "Anthropic Responsible Scaling Policy \u2014 pre-deployment capabi", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment risk a", "type": "FrameworkClause", "label": "Anthropic Responsible Scaling Policy \u2014 pre-deployment risk a", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic SOC 2 Type II and GDPR DPA \u2014 vendor assurance arti", "type": "FrameworkClause", "label": "Anthropic SOC 2 Type II and GDPR DPA \u2014 vendor assurance arti", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic Zero Data Retention (ZDR) Addendum", "type": "FrameworkClause", "label": "Anthropic Zero Data Retention (ZDR) Addendum", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic zero data retention option", "type": "FrameworkClause", "label": "Anthropic zero data retention option", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Anthropic zero data retention option \u2014 non-retention by arch", "type": "FrameworkClause", "label": "Anthropic zero data retention option \u2014 non-retention by arch", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Privacy Policy", "type": "FrameworkClause", "label": "Privacy Policy", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_privacy:Usage Policy", "type": "FrameworkClause", "label": "Usage Policy", "framework": "anthropic_privacy" }, { "id": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL Deployment and Security Standards", "type": "FrameworkClause", "label": "Anthropic RSP v3.3 \u2014 ASL Deployment and Security Standards", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL-3 Security Standard", "type": "FrameworkClause", "label": "Anthropic RSP v3.3 \u2014 ASL-3 Security Standard", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 Risk Reports", "type": "FrameworkClause", "label": "Anthropic RSP v3.3 \u2014 Risk Reports", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Anthropic Transparency Hub \u2014 Model Reports", "type": "FrameworkClause", "label": "Anthropic Transparency Hub \u2014 Model Reports", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Human Overs", "type": "FrameworkClause", "label": "Anthropic Usage Policy + Claude's Constitution \u2014 Human Overs", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Operator Sc", "type": "FrameworkClause", "label": "Anthropic Usage Policy + Claude's Constitution \u2014 Operator Sc", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "type": "FrameworkClause", "label": "ASL-3 Deployment and Security Standards", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:ASL-3 Deployment Standard", "type": "FrameworkClause", "label": "ASL-3 Deployment Standard", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 deployment restrictions and de-d", "type": "FrameworkClause", "label": "ASL-3 Deployment Standard \u2014 deployment restrictions and de-d", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse detection and rapid respo", "type": "FrameworkClause", "label": "ASL-3 Deployment Standard \u2014 misuse detection and rapid respo", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "type": "FrameworkClause", "label": "ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "type": "FrameworkClause", "label": "ASL-3 Deployment Standard \u2014 ongoing monitoring", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 provider-initiated de-deployment", "type": "FrameworkClause", "label": "ASL-3 Deployment Standard \u2014 provider-initiated de-deployment", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 rapid response to misuse", "type": "FrameworkClause", "label": "ASL-3 Deployment Standard \u2014 rapid response to misuse", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "type": "FrameworkClause", "label": "ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:ASL-3 Security Standard", "type": "FrameworkClause", "label": "ASL-3 Security Standard", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability assessment", "type": "FrameworkClause", "label": "Capability assessment", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability assessment methodology", "type": "FrameworkClause", "label": "Capability assessment methodology", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability assessments", "type": "FrameworkClause", "label": "Capability assessments", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability Report", "type": "FrameworkClause", "label": "Capability Report", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability Thresholds", "type": "FrameworkClause", "label": "Capability Thresholds", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability thresholds \u2014 ASL-3 standards at defined capabilit", "type": "FrameworkClause", "label": "Capability thresholds \u2014 ASL-3 standards at defined capabilit", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability Thresholds \u2014 capability and behavior assessment", "type": "FrameworkClause", "label": "Capability Thresholds \u2014 capability and behavior assessment", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability Thresholds \u2014 threshold-triggered safeguard requir", "type": "FrameworkClause", "label": "Capability Thresholds \u2014 threshold-triggered safeguard requir", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "type": "FrameworkClause", "label": "Capability Thresholds (ASL framework)", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability Thresholds (threshold-triggered evaluation and re", "type": "FrameworkClause", "label": "Capability Thresholds (threshold-triggered evaluation and re", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "type": "FrameworkClause", "label": "Capability thresholds and ASL-3 standards \u2014 provider-initiat", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "type": "FrameworkClause", "label": "Capability Thresholds and Required Safeguards", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards \u2014 pre-deployme", "type": "FrameworkClause", "label": "Capability Thresholds and Required Safeguards \u2014 pre-deployme", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "type": "FrameworkClause", "label": "Capability Thresholds and Required Safeguards (AI Safety Lev", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "type": "FrameworkClause", "label": "Capability Thresholds and Required Safeguards (evaluation-ga", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Claude's Constitution \u2014 operator and user permission hierarc", "type": "FrameworkClause", "label": "Claude's Constitution \u2014 operator and user permission hierarc", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Claude's Constitution + Anthropic Usage Policy \u2014 Acting With", "type": "FrameworkClause", "label": "Claude's Constitution + Anthropic Usage Policy \u2014 Acting With", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer accountability", "type": "FrameworkClause", "label": "Governance \u2014 Responsible Scaling Officer accountability", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer and internal accoun", "type": "FrameworkClause", "label": "Governance \u2014 Responsible Scaling Officer and internal accoun", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Governance (\u00a74)", "type": "FrameworkClause", "label": "Governance (\u00a74)", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Governance (\u00a74) \u2014 policy maintenance and updates", "type": "FrameworkClause", "label": "Governance (\u00a74) \u2014 policy maintenance and updates", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Governance and Transparency \u2014 public safety framework disclo", "type": "FrameworkClause", "label": "Governance and Transparency \u2014 public safety framework disclo", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer", "type": "FrameworkClause", "label": "Governance and Transparency \u2014 Responsible Scaling Officer", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer an", "type": "FrameworkClause", "label": "Governance and Transparency \u2014 Responsible Scaling Officer an", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "type": "FrameworkClause", "label": "Governance and Transparency \u2014 Risk Reports", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "type": "FrameworkClause", "label": "Governance and Transparency (documentation and disclosure of", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Required Safeguards", "type": "FrameworkClause", "label": "Required Safeguards", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "type": "FrameworkClause", "label": "Required Safeguards \u2014 ASL-3 Deployment Standard", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Responsible Scaling Officer", "type": "FrameworkClause", "label": "Responsible Scaling Officer", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Risk Reports (\u00a73.1 Scope and Timing) \u2014 recurring evidence ca", "type": "FrameworkClause", "label": "Risk Reports (\u00a73.1 Scope and Timing) \u2014 recurring evidence ca", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Risk Reports (\u00a73)", "type": "FrameworkClause", "label": "Risk Reports (\u00a73)", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Risk Reports (\u00a73) \u2014 documented capability and safeguard evid", "type": "FrameworkClause", "label": "Risk Reports (\u00a73) \u2014 documented capability and safeguard evid", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "type": "FrameworkClause", "label": "Risk Reports (capability and safeguards assessment before de", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Risk Reports (evaluation-gated deployment)", "type": "FrameworkClause", "label": "Risk Reports (evaluation-gated deployment)", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Risk Reports and capability determinations \u2014 documented safe", "type": "FrameworkClause", "label": "Risk Reports and capability determinations \u2014 documented safe", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Risk Reports and ongoing capability reassessment", "type": "FrameworkClause", "label": "Risk Reports and ongoing capability reassessment", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:RSP v3.3 \u2014 ASL-3 Deployment Standard (Misuse Safeguards and", "type": "FrameworkClause", "label": "RSP v3.3 \u2014 ASL-3 Deployment Standard (Misuse Safeguards and", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Assessment (Periodic Re-Evaluation)", "type": "FrameworkClause", "label": "RSP v3.3 \u2014 Capability Assessment (Periodic Re-Evaluation)", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Thresholds and Required Safeguards", "type": "FrameworkClause", "label": "RSP v3.3 \u2014 Capability Thresholds and Required Safeguards", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:RSP v3.3 \u2014 Documented Capability and Safeguards Assessments", "type": "FrameworkClause", "label": "RSP v3.3 \u2014 Documented Capability and Safeguards Assessments", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance (Responsible Scaling Officer and Board", "type": "FrameworkClause", "label": "RSP v3.3 \u2014 Governance (Responsible Scaling Officer and Board", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance and Transparency (Public Disclosures)", "type": "FrameworkClause", "label": "RSP v3.3 \u2014 Governance and Transparency (Public Disclosures)", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:RSP v3.3 \u2014 Re-Assessment Triggers on Material Change", "type": "FrameworkClause", "label": "RSP v3.3 \u2014 Re-Assessment Triggers on Material Change", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:RSP v3.3 \u2014 Required Safeguards as Blocking Conditions", "type": "FrameworkClause", "label": "RSP v3.3 \u2014 Required Safeguards as Blocking Conditions", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report", "type": "FrameworkClause", "label": "RSP v3.3 \u2014 Safeguards Assessment and Risk Report", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report Sign-Off", "type": "FrameworkClause", "label": "RSP v3.3 \u2014 Safeguards Assessment and Risk Report Sign-Off", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_rsp:Usage Policy (separate document) \u2014 restricted high-risk uses", "type": "FrameworkClause", "label": "Usage Policy (separate document) \u2014 restricted high-risk uses", "framework": "anthropic_rsp" }, { "id": "clause:anthropic_transparency:Model card \u2014 factual-accuracy evaluations and limitations", "type": "FrameworkClause", "label": "Model card \u2014 factual-accuracy evaluations and limitations", "framework": "anthropic_transparency" }, { "id": "clause:anthropic_transparency:Model card \u2014 hallucination and factuality evaluations", "type": "FrameworkClause", "label": "Model card \u2014 hallucination and factuality evaluations", "framework": "anthropic_transparency" }, { "id": "clause:anthropic_transparency:Model card \u2014 knowledge cutoff disclosure", "type": "FrameworkClause", "label": "Model card \u2014 knowledge cutoff disclosure", "framework": "anthropic_transparency" }, { "id": "clause:anthropic_transparency:Model card \u2014 known limitations and citation-accuracy risks", "type": "FrameworkClause", "label": "Model card \u2014 known limitations and citation-accuracy risks", "framework": "anthropic_transparency" }, { "id": "clause:anthropic_transparency:Model card \u2014 known limitations disclosure", "type": "FrameworkClause", "label": "Model card \u2014 known limitations disclosure", "framework": "anthropic_transparency" }, { "id": "clause:anthropic_transparency:Model Card \u2014 Training Data Cutoff", "type": "FrameworkClause", "label": "Model Card \u2014 Training Data Cutoff", "framework": "anthropic_transparency" }, { "id": "clause:anthropic_transparency:Model card \u2014 training data description", "type": "FrameworkClause", "label": "Model card \u2014 training data description", "framework": "anthropic_transparency" }, { "id": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "type": "FrameworkClause", "label": "Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part I \u2014 Regulated industries and compliance requirements; P", "type": "FrameworkClause", "label": "Part I \u2014 Regulated industries and compliance requirements; P", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part II \u2014 Identity and privilege abuse (agents operate with", "type": "FrameworkClause", "label": "Part II \u2014 Identity and privilege abuse (agents operate with", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part II \u2014 Memory-based privilege retention (escalating privi", "type": "FrameworkClause", "label": "Part II \u2014 Memory-based privilege retention (escalating privi", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks (loop amplification)", "type": "FrameworkClause", "label": "Part II \u2014 Resource exhaustion attacks (loop amplification)", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "type": "FrameworkClause", "label": "Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "type": "FrameworkClause", "label": "Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning; Part III \u2014 Input sanitization (tre", "type": "FrameworkClause", "label": "Part II \u2014 Tool poisoning; Part III \u2014 Input sanitization (tre", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance (manager to worker", "type": "FrameworkClause", "label": "Part II \u2014 Unscoped privilege inheritance (manager to worker", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "type": "FrameworkClause", "label": "Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "type": "FrameworkClause", "label": "Part III \u2014 Access control and privilege management (continuo", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "type": "FrameworkClause", "label": "Part III \u2014 Action logging (Immutable audit trails with integ", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Log all tool invocations)", "type": "FrameworkClause", "label": "Part III \u2014 Action logging (Log all tool invocations)", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "type": "FrameworkClause", "label": "Part III \u2014 Action logging; Part III \u2014 Observability and audi", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Advanced: hard", "type": "FrameworkClause", "label": "Part III \u2014 Agent identity and authentication (Advanced: hard", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (certificate li", "type": "FrameworkClause", "label": "Part III \u2014 Agent identity and authentication (certificate li", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Enterprise: mu", "type": "FrameworkClause", "label": "Part III \u2014 Agent identity and authentication (Enterprise: mu", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Foundation/Ent", "type": "FrameworkClause", "label": "Part III \u2014 Agent identity and authentication (Foundation/Ent", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Unique cryptog", "type": "FrameworkClause", "label": "Part III \u2014 Agent identity and authentication (Unique cryptog", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification (persistent agent IDs", "type": "FrameworkClause", "label": "Part III \u2014 Agent identity verification (persistent agent IDs", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "type": "FrameworkClause", "label": "Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "type": "FrameworkClause", "label": "Part III \u2014 AI governance policies (Address Shadow AI); Part", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (approval processes for ne", "type": "FrameworkClause", "label": "Part III \u2014 AI governance policies (approval processes for ne", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "type": "FrameworkClause", "label": "Part III \u2014 AI governance policies (Continuous policy enforce", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "type": "FrameworkClause", "label": "Part III \u2014 AI governance policies (Document who approves age", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Documented acceptable use", "type": "FrameworkClause", "label": "Part III \u2014 AI governance policies (Documented acceptable use", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "type": "FrameworkClause", "label": "Part III \u2014 AI governance policies (formal governance framewo", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (incident response procedu", "type": "FrameworkClause", "label": "Part III \u2014 AI governance policies (incident response procedu", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "type": "FrameworkClause", "label": "Part III \u2014 AI governance policies (risk assessment procedure", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Update policies based on", "type": "FrameworkClause", "label": "Part III \u2014 AI governance policies (Update policies based on", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "type": "FrameworkClause", "label": "Part III \u2014 Anomaly detection", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (alert when thresholds exceeded", "type": "FrameworkClause", "label": "Part III \u2014 Anomaly detection (alert when thresholds exceeded", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (API call rates, data access vo", "type": "FrameworkClause", "label": "Part III \u2014 Anomaly detection (API call rates, data access vo", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "type": "FrameworkClause", "label": "Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part IV Phase 6 \u2014 Attribute-ba", "type": "FrameworkClause", "label": "Part III \u2014 Anomaly detection; Part IV Phase 6 \u2014 Attribute-ba", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Automated response (session termination, credenti", "type": "FrameworkClause", "label": "Part III \u2014 Automated response (session termination, credenti", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Automated response; Part V \u2014 Establish emergency", "type": "FrameworkClause", "label": "Part III \u2014 Automated response; Part V \u2014 Establish emergency", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment", "type": "FrameworkClause", "label": "Part III \u2014 Baseline establishment", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "type": "FrameworkClause", "label": "Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "type": "FrameworkClause", "label": "Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "type": "FrameworkClause", "label": "Part III \u2014 Configuration integrity", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "type": "FrameworkClause", "label": "Part III \u2014 Output filtering", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "type": "FrameworkClause", "label": "Part III \u2014 Output filtering (scan/block PII, credentials, se", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Dynamic privilege adjustment b", "type": "FrameworkClause", "label": "Part III \u2014 Privilege scoping (Dynamic privilege adjustment b", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (JIT/JEA, dynamic elevation); P", "type": "FrameworkClause", "label": "Part III \u2014 Privilege scoping (JIT/JEA, dynamic elevation); P", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Review and certify permissions", "type": "FrameworkClause", "label": "Part III \u2014 Privilege scoping (Review and certify permissions", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Recovery capabilities", "type": "FrameworkClause", "label": "Part III \u2014 Recovery capabilities", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "type": "FrameworkClause", "label": "Part III \u2014 Resource boundaries (block unnecessary east-west", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (identity-based isolation: ev", "type": "FrameworkClause", "label": "Part III \u2014 Resource boundaries (identity-based isolation: ev", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "type": "FrameworkClause", "label": "Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (OAuth 2.0); Part IV Phase", "type": "FrameworkClause", "label": "Part III \u2014 Service authentication (OAuth 2.0); Part IV Phase", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "type": "FrameworkClause", "label": "Part III \u2014 Service authentication (short-lived tokens from a", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens, OAuth", "type": "FrameworkClause", "label": "Part III \u2014 Service authentication (short-lived tokens, OAuth", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens); Part", "type": "FrameworkClause", "label": "Part III \u2014 Service authentication (short-lived tokens); Part", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (token-based authenticatio", "type": "FrameworkClause", "label": "Part III \u2014 Service authentication (token-based authenticatio", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Service authentication; Part III \u2014 Access control", "type": "FrameworkClause", "label": "Part III \u2014 Service authentication; Part III \u2014 Access control", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Distributed tracing across multi-ag", "type": "FrameworkClause", "label": "Part III \u2014 Traceability (Distributed tracing across multi-ag", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "type": "FrameworkClause", "label": "Part III \u2014 Traceability (Full provenance chains from input t", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "type": "FrameworkClause", "label": "Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "type": "FrameworkClause", "label": "Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "type": "FrameworkClause", "label": "Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments", "type": "FrameworkClause", "label": "Part IV Phase 2 \u2014 Vendor assessments", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "type": "FrameworkClause", "label": "Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part IV Phase 5 \u2014 Sand", "type": "FrameworkClause", "label": "Part IV Phase 2 \u2014 Vendor assessments; Part IV Phase 5 \u2014 Sand", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "type": "FrameworkClause", "label": "Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part II \u2014 Unscoped pr", "type": "FrameworkClause", "label": "Part IV Phase 3 \u2014 Escalation triggers; Part II \u2014 Unscoped pr", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "type": "FrameworkClause", "label": "Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency", "type": "FrameworkClause", "label": "Part IV Phase 3 \u2014 Scope limits / Least Agency", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "type": "FrameworkClause", "label": "Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "type": "FrameworkClause", "label": "Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "type": "FrameworkClause", "label": "Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "type": "FrameworkClause", "label": "Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "type": "FrameworkClause", "label": "Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "type": "FrameworkClause", "label": "Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "type": "FrameworkClause", "label": "Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "type": "FrameworkClause", "label": "Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "type": "FrameworkClause", "label": "Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "type": "FrameworkClause", "label": "Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "type": "FrameworkClause", "label": "Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing (explicit lists of perm", "type": "FrameworkClause", "label": "Part IV Phase 5 \u2014 Tool allow-listing (explicit lists of perm", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "type": "FrameworkClause", "label": "Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (credentials never in", "type": "FrameworkClause", "label": "Part IV Phase 6 \u2014 Credential isolation (credentials never in", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (each agent instance", "type": "FrameworkClause", "label": "Part IV Phase 6 \u2014 Credential isolation (each agent instance", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "type": "FrameworkClause", "label": "Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (authorization c", "type": "FrameworkClause", "label": "Part IV Phase 6 \u2014 Explicit trust boundaries (authorization c", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "type": "FrameworkClause", "label": "Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "type": "FrameworkClause", "label": "Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "type": "FrameworkClause", "label": "Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 AI g", "type": "FrameworkClause", "label": "Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 AI g", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Just-in-time (JIT) access; Part III \u2014 Priv", "type": "FrameworkClause", "label": "Part IV Phase 6 \u2014 Just-in-time (JIT) access; Part III \u2014 Priv", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Short-lived, identity-provider-issued cred", "type": "FrameworkClause", "label": "Part IV Phase 6 \u2014 Short-lived, identity-provider-issued cred", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "type": "FrameworkClause", "label": "Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Behavior (goal/behavioral drift); Part III", "type": "FrameworkClause", "label": "Part IV Phase 8 \u2014 Behavior (goal/behavioral drift); Part III", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Measure what matters (Dwell time and cover", "type": "FrameworkClause", "label": "Part IV Phase 8 \u2014 Measure what matters (Dwell time and cover", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part V \u2014 Establish emergency change procedures in advance; P", "type": "FrameworkClause", "label": "Part V \u2014 Establish emergency change procedures in advance; P", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "type": "FrameworkClause", "label": "Part V \u2014 Map detection coverage against MITRE ATT&CK", "framework": "anthropic_zt_agents" }, { "id": "clause:anthropic_zt_agents:Part V \u2014 Trust through verification for defensive agents", "type": "FrameworkClause", "label": "Part V \u2014 Trust through verification for defensive agents", "framework": "anthropic_zt_agents" }, { "id": "clause:aws_artifact:Artifact agreement", "type": "FrameworkClause", "label": "Artifact agreement", "framework": "aws_artifact" }, { "id": "clause:aws_artifact:AWS security posture documentation", "type": "FrameworkClause", "label": "AWS security posture documentation", "framework": "aws_artifact" }, { "id": "clause:aws_artifact:Compliance report access", "type": "FrameworkClause", "label": "Compliance report access", "framework": "aws_artifact" }, { "id": "clause:aws_artifact:Compliance Reports", "type": "FrameworkClause", "label": "Compliance Reports", "framework": "aws_artifact" }, { "id": "clause:aws_artifact:FedRAMP High Package", "type": "FrameworkClause", "label": "FedRAMP High Package", "framework": "aws_artifact" }, { "id": "clause:aws_artifact:Third-party audit report", "type": "FrameworkClause", "label": "Third-party audit report", "framework": "aws_artifact" }, { "id": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 content evaluation for arbitrary payloa", "type": "FrameworkClause", "label": "ApplyGuardrail API \u2014 content evaluation for arbitrary payloa", "framework": "aws_bedrock_guardrails" }, { "id": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 per-request policy evaluation results", "type": "FrameworkClause", "label": "ApplyGuardrail API \u2014 per-request policy evaluation results", "framework": "aws_bedrock_guardrails" }, { "id": "clause:aws_bedrock_guardrails:Content filters \u2014 input screening", "type": "FrameworkClause", "label": "Content filters \u2014 input screening", "framework": "aws_bedrock_guardrails" }, { "id": "clause:aws_bedrock_guardrails:Content filters \u2014 per-request blocking (no agent suspension)", "type": "FrameworkClause", "label": "Content filters \u2014 per-request blocking (no agent suspension)", "framework": "aws_bedrock_guardrails" }, { "id": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "type": "FrameworkClause", "label": "Content filters \u2014 prompt attack detection", "framework": "aws_bedrock_guardrails" }, { "id": "clause:aws_bedrock_guardrails:Content filters \u2014 real-time policy screening", "type": "FrameworkClause", "label": "Content filters \u2014 real-time policy screening", "framework": "aws_bedrock_guardrails" }, { "id": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "type": "FrameworkClause", "label": "Content filters and contextual grounding checks \u2014 per-reques", "framework": "aws_bedrock_guardrails" }, { "id": "clause:aws_bedrock_guardrails:Content filters applied to agent responses", "type": "FrameworkClause", "label": "Content filters applied to agent responses", "framework": "aws_bedrock_guardrails" }, { "id": "clause:aws_bedrock_guardrails:Contextual grounding checks", "type": "FrameworkClause", "label": "Contextual grounding checks", "framework": "aws_bedrock_guardrails" }, { "id": "clause:aws_bedrock_guardrails:Denied topics", "type": "FrameworkClause", "label": "Denied topics", "framework": "aws_bedrock_guardrails" }, { "id": "clause:aws_bedrock_guardrails:Denied topics and content filters", "type": "FrameworkClause", "label": "Denied topics and content filters", "framework": "aws_bedrock_guardrails" }, { "id": "clause:aws_bedrock_guardrails:Guardrail trace in agent invocation output", "type": "FrameworkClause", "label": "Guardrail trace in agent invocation output", "framework": "aws_bedrock_guardrails" }, { "id": "clause:aws_bedrock_guardrails:Sensitive information filters", "type": "FrameworkClause", "label": "Sensitive information filters", "framework": "aws_bedrock_guardrails" }, { "id": "clause:aws_bedrock_kb:Guardrails \u2014 content filters and contextual grounding check", "type": "FrameworkClause", "label": "Guardrails \u2014 content filters and contextual grounding check", "framework": "aws_bedrock_kb" }, { "id": "clause:aws_bedrock_kb:Guardrails \u2014 contextual grounding check", "type": "FrameworkClause", "label": "Guardrails \u2014 contextual grounding check", "framework": "aws_bedrock_kb" }, { "id": "clause:aws_bedrock_kb:Knowledge Base data source configuration", "type": "FrameworkClause", "label": "Knowledge Base data source configuration", "framework": "aws_bedrock_kb" }, { "id": "clause:aws_bedrock_kb:Knowledge Base Data Source Configuration", "type": "FrameworkClause", "label": "Knowledge Base Data Source Configuration", "framework": "aws_bedrock_kb" }, { "id": "clause:aws_bedrock_kb:Knowledge Base Data Source Permissions", "type": "FrameworkClause", "label": "Knowledge Base Data Source Permissions", "framework": "aws_bedrock_kb" }, { "id": "clause:aws_bedrock_kb:Knowledge Base Metrics and Evaluation", "type": "FrameworkClause", "label": "Knowledge Base Metrics and Evaluation", "framework": "aws_bedrock_kb" }, { "id": "clause:aws_bedrock_kb:Knowledge Bases \u2014 data source sync and ingestion job status", "type": "FrameworkClause", "label": "Knowledge Bases \u2014 data source sync and ingestion job status", "framework": "aws_bedrock_kb" }, { "id": "clause:aws_bedrock_kb:Knowledge Bases \u2014 Retrieve API relevance scores", "type": "FrameworkClause", "label": "Knowledge Bases \u2014 Retrieve API relevance scores", "framework": "aws_bedrock_kb" }, { "id": "clause:aws_bedrock_kb:Knowledge Bases audit logging and compliance", "type": "FrameworkClause", "label": "Knowledge Bases audit logging and compliance", "framework": "aws_bedrock_kb" }, { "id": "clause:aws_financial:AWS Artifact", "type": "FrameworkClause", "label": "AWS Artifact", "framework": "aws_financial" }, { "id": "clause:aws_financial:AWS Audit Manager", "type": "FrameworkClause", "label": "AWS Audit Manager", "framework": "aws_financial" }, { "id": "clause:aws_financial:AWS CloudTrail", "type": "FrameworkClause", "label": "AWS CloudTrail", "framework": "aws_financial" }, { "id": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "type": "FrameworkClause", "label": "AWS User Guide to Financial Services Regulations & Guideline", "framework": "aws_financial" }, { "id": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "FrameworkClause", "label": "Financial Services Industry Lens \u2014 AWS Well-Architected", "framework": "aws_financial" }, { "id": "clause:aws_iam:AWS CloudTrail \u2014 Assume Role Audit Trail", "type": "FrameworkClause", "label": "AWS CloudTrail \u2014 Assume Role Audit Trail", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS CloudTrail \u2014 Credential Sharing Detection", "type": "FrameworkClause", "label": "AWS CloudTrail \u2014 Credential Sharing Detection", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity", "type": "FrameworkClause", "label": "AWS CloudTrail \u2014 Log File Integrity", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity Validation", "type": "FrameworkClause", "label": "AWS CloudTrail \u2014 Log File Integrity Validation", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS CloudTrail \u2014 Organization Trail", "type": "FrameworkClause", "label": "AWS CloudTrail \u2014 Organization Trail", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS CloudTrail Insights \u2014 Behavior Baseline", "type": "FrameworkClause", "label": "AWS CloudTrail Insights \u2014 Behavior Baseline", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS GuardDuty \u2014 Automated Incident Response", "type": "FrameworkClause", "label": "AWS GuardDuty \u2014 Automated Incident Response", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS GuardDuty \u2014 IAM Finding Types", "type": "FrameworkClause", "label": "AWS GuardDuty \u2014 IAM Finding Types", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS GuardDuty \u2014 Instance Credential Exfiltration", "type": "FrameworkClause", "label": "AWS GuardDuty \u2014 Instance Credential Exfiltration", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS GuardDuty \u2014 Privilege Escalation Findings", "type": "FrameworkClause", "label": "AWS GuardDuty \u2014 Privilege Escalation Findings", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM \u2014 Break Glass Role", "type": "FrameworkClause", "label": "AWS IAM \u2014 Break Glass Role", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Assume Conditions", "type": "FrameworkClause", "label": "AWS IAM \u2014 Cross Account Role Assume Conditions", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Chaining", "type": "FrameworkClause", "label": "AWS IAM \u2014 Cross Account Role Chaining", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM \u2014 Cross Account Trust Policies", "type": "FrameworkClause", "label": "AWS IAM \u2014 Cross Account Trust Policies", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM \u2014 Identity Provider Federation", "type": "FrameworkClause", "label": "AWS IAM \u2014 Identity Provider Federation", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM \u2014 Permission Boundaries", "type": "FrameworkClause", "label": "AWS IAM \u2014 Permission Boundaries", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM \u2014 Privileged Role MFA Condition", "type": "FrameworkClause", "label": "AWS IAM \u2014 Privileged Role MFA Condition", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM \u2014 Regional STS Endpoints", "type": "FrameworkClause", "label": "AWS IAM \u2014 Regional STS Endpoints", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM \u2014 Role Deletion Revocation", "type": "FrameworkClause", "label": "AWS IAM \u2014 Role Deletion Revocation", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM \u2014 Role Session Revocation", "type": "FrameworkClause", "label": "AWS IAM \u2014 Role Session Revocation", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Continuous Access Review", "type": "FrameworkClause", "label": "AWS IAM Access Analyzer \u2014 Continuous Access Review", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Unused Access Findings", "type": "FrameworkClause", "label": "AWS IAM Access Analyzer \u2014 Unused Access Findings", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM Best Practices \u2014 Least Privilege", "type": "FrameworkClause", "label": "AWS IAM Best Practices \u2014 Least Privilege", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM Best Practices \u2014 Separate Human Workload Identity", "type": "FrameworkClause", "label": "AWS IAM Best Practices \u2014 Separate Human Workload Identity", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM Best Practices \u2014 Use Roles Not Users", "type": "FrameworkClause", "label": "AWS IAM Best Practices \u2014 Use Roles Not Users", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 Certificate Binding", "type": "FrameworkClause", "label": "AWS IAM Roles Anywhere \u2014 Certificate Binding", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 HSM Integration", "type": "FrameworkClause", "label": "AWS IAM Roles Anywhere \u2014 HSM Integration", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM Tagging \u2014 Principal Tags", "type": "FrameworkClause", "label": "AWS IAM Tagging \u2014 Principal Tags", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS IAM Tagging \u2014 Resource Owner Tags", "type": "FrameworkClause", "label": "AWS IAM Tagging \u2014 Resource Owner Tags", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS Organizations SCPs \u2014 Provisioning Restriction", "type": "FrameworkClause", "label": "AWS Organizations SCPs \u2014 Provisioning Restriction", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS Secrets Manager \u2014 Automated Rotation", "type": "FrameworkClause", "label": "AWS Secrets Manager \u2014 Automated Rotation", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS Security Hub \u2014 Identity Security Metrics", "type": "FrameworkClause", "label": "AWS Security Hub \u2014 Identity Security Metrics", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS STS \u2014 Assume Role Session Policies", "type": "FrameworkClause", "label": "AWS STS \u2014 Assume Role Session Policies", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS STS \u2014 Role Chaining Session Policy", "type": "FrameworkClause", "label": "AWS STS \u2014 Role Chaining Session Policy", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS STS \u2014 Session Policies Task Scoped", "type": "FrameworkClause", "label": "AWS STS \u2014 Session Policies Task Scoped", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS Trusted Advisor \u2014 Exposed Access Keys / Amazon GuardDuty", "type": "FrameworkClause", "label": "AWS Trusted Advisor \u2014 Exposed Access Keys / Amazon GuardDuty", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS Well-Architected SEC02-BP03 \u2014 Secrets Management", "type": "FrameworkClause", "label": "AWS Well-Architected SEC02-BP03 \u2014 Secrets Management", "framework": "aws_iam" }, { "id": "clause:aws_iam:AWS Well-Architected Security Pillar \u2014 SEC02 (identity and a", "type": "FrameworkClause", "label": "AWS Well-Architected Security Pillar \u2014 SEC02 (identity and a", "framework": "aws_iam" }, { "id": "clause:aws_lake_formation:Amazon Macie", "type": "FrameworkClause", "label": "Amazon Macie", "framework": "aws_lake_formation" }, { "id": "clause:aws_lake_formation:Amazon S3 \u2014 Object Integrity and Checksums", "type": "FrameworkClause", "label": "Amazon S3 \u2014 Object Integrity and Checksums", "framework": "aws_lake_formation" }, { "id": "clause:aws_lake_formation:AWS Glue Data Quality (DQDL rulesets)", "type": "FrameworkClause", "label": "AWS Glue Data Quality (DQDL rulesets)", "framework": "aws_lake_formation" }, { "id": "clause:aws_lake_formation:AWS Glue Schema Registry", "type": "FrameworkClause", "label": "AWS Glue Schema Registry", "framework": "aws_lake_formation" }, { "id": "clause:aws_organizations:Amazon Bedrock Policies \u2014 Organization-Level Guardrail Enfor", "type": "FrameworkClause", "label": "Amazon Bedrock Policies \u2014 Organization-Level Guardrail Enfor", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Artifact \u2014 Compliance Documentation for Contractual Obli", "type": "FrameworkClause", "label": "AWS Artifact \u2014 Compliance Documentation for Contractual Obli", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Artifact \u2014 Contract Review Gate Documentation", "type": "FrameworkClause", "label": "AWS Artifact \u2014 Contract Review Gate Documentation", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Artifact \u2014 On-Demand Regulatory Compliance Disclosure", "type": "FrameworkClause", "label": "AWS Artifact \u2014 On-Demand Regulatory Compliance Disclosure", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Attestation Artifact Ge", "type": "FrameworkClause", "label": "AWS Audit Manager \u2014 Automated Policy Attestation Artifact Ge", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Evidence Archive", "type": "FrameworkClause", "label": "AWS Audit Manager \u2014 Automated Policy Evidence Archive", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Audit Manager \u2014 Contract Compliance Evidence Collection", "type": "FrameworkClause", "label": "AWS Audit Manager \u2014 Contract Compliance Evidence Collection", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Audit Manager \u2014 Deployment Scope Evidence Collection", "type": "FrameworkClause", "label": "AWS Audit Manager \u2014 Deployment Scope Evidence Collection", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Audit Manager \u2014 Internal Audit Evidence Package Generati", "type": "FrameworkClause", "label": "AWS Audit Manager \u2014 Internal Audit Evidence Package Generati", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Audit Manager Custom Frameworks \u2014 Board-Ready Governance", "type": "FrameworkClause", "label": "AWS Audit Manager Custom Frameworks \u2014 Board-Ready Governance", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Break-Glass Account Procedure \u2014 SCP Exception with Full", "type": "FrameworkClause", "label": "AWS Break-Glass Account Procedure \u2014 SCP Exception with Full", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS CloudTrail \u2014 Principal Accountability Binding for All AP", "type": "FrameworkClause", "label": "AWS CloudTrail \u2014 Principal Accountability Binding for All AP", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Immutable Contract Audit Tr", "type": "FrameworkClause", "label": "AWS CloudTrail + Audit Manager \u2014 Immutable Contract Audit Tr", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Procurement Audit Trail", "type": "FrameworkClause", "label": "AWS CloudTrail + Audit Manager \u2014 Procurement Audit Trail", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Tamper-Evident Approval Rec", "type": "FrameworkClause", "label": "AWS CloudTrail + Audit Manager \u2014 Tamper-Evident Approval Rec", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS CloudTrail + EventBridge \u2014 SCP and IAM Policy Change Det", "type": "FrameworkClause", "label": "AWS CloudTrail + EventBridge \u2014 SCP and IAM Policy Change Det", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Config \u2014 Configuration Drift Detection for Knowledge Res", "type": "FrameworkClause", "label": "AWS Config \u2014 Configuration Drift Detection for Knowledge Res", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Config \u2014 Contractual Requirement Conflict Detection", "type": "FrameworkClause", "label": "AWS Config \u2014 Contractual Requirement Conflict Detection", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Config \u2014 Knowledge Resource Configuration Drift Detectio", "type": "FrameworkClause", "label": "AWS Config \u2014 Knowledge Resource Configuration Drift Detectio", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Config + Security Hub \u2014 Continuous Policy Adherence Moni", "type": "FrameworkClause", "label": "AWS Config + Security Hub \u2014 Continuous Policy Adherence Moni", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Config Continuous Compliance \u2014 Contract Obligation Monit", "type": "FrameworkClause", "label": "AWS Config Continuous Compliance \u2014 Contract Obligation Monit", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Config Rules + CloudTrail Alerting \u2014 Authority Limit Vio", "type": "FrameworkClause", "label": "AWS Config Rules + CloudTrail Alerting \u2014 Authority Limit Vio", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Control Tower + Marketplace Governance \u2014 Third-Party Pol", "type": "FrameworkClause", "label": "AWS Control Tower + Marketplace Governance \u2014 Third-Party Pol", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Control Tower Detective Controls \u2014 Policy Violation Esca", "type": "FrameworkClause", "label": "AWS Control Tower Detective Controls \u2014 Policy Violation Esca", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Control Tower Landing Zone \u2014 Centralized Policy Registry", "type": "FrameworkClause", "label": "AWS Control Tower Landing Zone \u2014 Centralized Policy Registry", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Control Tower Proactive Controls \u2014 Change Governance", "type": "FrameworkClause", "label": "AWS Control Tower Proactive Controls \u2014 Change Governance", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS IAM Permission Boundaries \u2014 Delegation Scope Enforcement", "type": "FrameworkClause", "label": "AWS IAM Permission Boundaries \u2014 Delegation Scope Enforcement", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Marketplace + Control Tower \u2014 Procurement Policy Integra", "type": "FrameworkClause", "label": "AWS Marketplace + Control Tower \u2014 Procurement Policy Integra", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Marketplace + Partner Network \u2014 Vendor Qualification Fra", "type": "FrameworkClause", "label": "AWS Marketplace + Partner Network \u2014 Vendor Qualification Fra", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Organizations + CloudTrail \u2014 SCP Change History and IaC-", "type": "FrameworkClause", "label": "AWS Organizations + CloudTrail \u2014 SCP Change History and IaC-", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Organizations SCP \u2014 Approved Data Source Restriction", "type": "FrameworkClause", "label": "AWS Organizations SCP \u2014 Approved Data Source Restriction", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Organizations SCP + Amazon Macie \u2014 Data Use Policy Enfor", "type": "FrameworkClause", "label": "AWS Organizations SCP + Amazon Macie \u2014 Data Use Policy Enfor", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 AI-Initiated Financial", "type": "FrameworkClause", "label": "AWS Organizations SCP + AWS Budgets \u2014 AI-Initiated Financial", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 Approval Limit Control", "type": "FrameworkClause", "label": "AWS Organizations SCP + AWS Budgets \u2014 Approval Limit Control", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Organizations SCP Design \u2014 Scope Boundary Enforcement", "type": "FrameworkClause", "label": "AWS Organizations SCP Design \u2014 Scope Boundary Enforcement", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Resource Access Manager \u2014 Cross-Account Share Acceptance", "type": "FrameworkClause", "label": "AWS Resource Access Manager \u2014 Cross-Account Share Acceptance", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS SCP \u2014 AI Agent External Communication Service Restrictio", "type": "FrameworkClause", "label": "AWS SCP \u2014 AI Agent External Communication Service Restrictio", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Security Hub \u2014 Cross-Domain Policy Evidence Normalizatio", "type": "FrameworkClause", "label": "AWS Security Hub \u2014 Cross-Domain Policy Evidence Normalizatio", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Security Hub \u2014 Policy Incident Classification and Routin", "type": "FrameworkClause", "label": "AWS Security Hub \u2014 Policy Incident Classification and Routin", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Security Hub + Audit Manager \u2014 Policy Governance Reports", "type": "FrameworkClause", "label": "AWS Security Hub + Audit Manager \u2014 Policy Governance Reports", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Security Hub Findings History \u2014 Policy Improvement Input", "type": "FrameworkClause", "label": "AWS Security Hub Findings History \u2014 Policy Improvement Input", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:AWS Service Level Agreements + CloudWatch \u2014 SLA Governance", "type": "FrameworkClause", "label": "AWS Service Level Agreements + CloudWatch \u2014 SLA Governance", "framework": "aws_organizations" }, { "id": "clause:aws_organizations:CloudTrail + AWS GuardDuty \u2014 Behavioral Anomaly Detection fo", "type": "FrameworkClause", "label": "CloudTrail + AWS GuardDuty \u2014 Behavioral Anomaly Detection fo", "framework": "aws_organizations" }, { "id": "clause:aws_privacy:Amazon Cognito and AWS IAM \u2014 identity verification capabilit", "type": "FrameworkClause", "label": "Amazon Cognito and AWS IAM \u2014 identity verification capabilit", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:Amazon Comprehend \u2014 PII detection and redaction", "type": "FrameworkClause", "label": "Amazon Comprehend \u2014 PII detection and redaction", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:Amazon Macie \u2014 sensitive data discovery and anomaly findings", "type": "FrameworkClause", "label": "Amazon Macie \u2014 sensitive data discovery and anomaly findings", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:Amazon Macie Sensitive Data Discovery", "type": "FrameworkClause", "label": "Amazon Macie Sensitive Data Discovery", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:Amazon SageMaker Ground Truth \u2014 synthetic data generation", "type": "FrameworkClause", "label": "Amazon SageMaker Ground Truth \u2014 synthetic data generation", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 data and model quality drif", "type": "FrameworkClause", "label": "Amazon SageMaker Model Monitor \u2014 data and model quality drif", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 inference quality monitorin", "type": "FrameworkClause", "label": "Amazon SageMaker Model Monitor \u2014 inference quality monitorin", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Artifact \u2014 jurisdiction-organized compliance reports and", "type": "FrameworkClause", "label": "AWS Artifact \u2014 jurisdiction-organized compliance reports and", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Artifact \u2014 on-demand compliance reports", "type": "FrameworkClause", "label": "AWS Artifact \u2014 on-demand compliance reports", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Audit Manager \u2014 framework-based assessments", "type": "FrameworkClause", "label": "AWS Audit Manager \u2014 framework-based assessments", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS CloudTrail \u2014 API event logging", "type": "FrameworkClause", "label": "AWS CloudTrail \u2014 API event logging", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS CloudTrail \u2014 immutable governance logging", "type": "FrameworkClause", "label": "AWS CloudTrail \u2014 immutable governance logging", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS CloudTrail with S3 Object Lock \u2014 WORM evidence archive", "type": "FrameworkClause", "label": "AWS CloudTrail with S3 Object Lock \u2014 WORM evidence archive", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Config custom rules \u2014 configuration compliance checks", "type": "FrameworkClause", "label": "AWS Config custom rules \u2014 configuration compliance checks", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Customer Compliance Center \u2014 regulatory resources", "type": "FrameworkClause", "label": "AWS Customer Compliance Center \u2014 regulatory resources", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS data lifecycle management \u2014 S3 Lifecycle and RDS retenti", "type": "FrameworkClause", "label": "AWS data lifecycle management \u2014 S3 Lifecycle and RDS retenti", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Data Processing Addendum (GDPR DPA)", "type": "FrameworkClause", "label": "AWS Data Processing Addendum (GDPR DPA)", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS data transfer resources \u2014 customer TIA support", "type": "FrameworkClause", "label": "AWS data transfer resources \u2014 customer TIA support", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS GDPR compliance resources \u2014 customer DPIA support", "type": "FrameworkClause", "label": "AWS GDPR compliance resources \u2014 customer DPIA support", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS GDPR compliance whitepaper \u2014 data transfer mechanisms", "type": "FrameworkClause", "label": "AWS GDPR compliance whitepaper \u2014 data transfer mechanisms", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Glue DataBrew \u2014 PII masking and redaction transformation", "type": "FrameworkClause", "label": "AWS Glue DataBrew \u2014 PII masking and redaction transformation", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS ISO/IEC 42001 accredited certification \u2014 AI services", "type": "FrameworkClause", "label": "AWS ISO/IEC 42001 accredited certification \u2014 AI services", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS ISO/IEC 42001 certification \u2014 AI management system impac", "type": "FrameworkClause", "label": "AWS ISO/IEC 42001 certification \u2014 AI management system impac", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS ISO/IEC 42001 certification and SOC 2 \u2014 vendor assurance", "type": "FrameworkClause", "label": "AWS ISO/IEC 42001 certification and SOC 2 \u2014 vendor assurance", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS KMS and S3 server-side encryption \u2014 AES-256 at rest, TLS", "type": "FrameworkClause", "label": "AWS KMS and S3 server-side encryption \u2014 AES-256 at rest, TLS", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Lake Formation \u00a7Column/Row-Level Security for Minimizati", "type": "FrameworkClause", "label": "AWS Lake Formation \u00a7Column/Row-Level Security for Minimizati", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Lake Formation and Glue Data Catalog \u2014 centralized gover", "type": "FrameworkClause", "label": "AWS Lake Formation and Glue Data Catalog \u2014 centralized gover", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Lake Formation Data Catalog", "type": "FrameworkClause", "label": "AWS Lake Formation Data Catalog", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Lake Formation Fine-Grained Access Control", "type": "FrameworkClause", "label": "AWS Lake Formation Fine-Grained Access Control", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "type": "FrameworkClause", "label": "AWS Marketplace Vendor Insights \u2014 third-party security and c", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Security Hub \u2014 findings aggregation and automated respon", "type": "FrameworkClause", "label": "AWS Security Hub \u2014 findings aggregation and automated respon", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Security Incident Response Guide", "type": "FrameworkClause", "label": "AWS Security Incident Response Guide", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Shared Responsibility Model \u2014 customer obligations for c", "type": "FrameworkClause", "label": "AWS Shared Responsibility Model \u2014 customer obligations for c", "framework": "aws_privacy" }, { "id": "clause:aws_privacy:AWS Well-Architected Machine Learning Lens \u2014 security and pr", "type": "FrameworkClause", "label": "AWS Well-Architected Machine Learning Lens \u2014 security and pr", "framework": "aws_privacy" }, { "id": "clause:aws_reliability:AWS Well-Architected Framework \u2014 Well-Architected Review: st", "type": "FrameworkClause", "label": "AWS Well-Architected Framework \u2014 Well-Architected Review: st", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Failure management", "type": "FrameworkClause", "label": "AWS Well-Architected Reliability Pillar \u2014 Failure management", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Resilience design", "type": "FrameworkClause", "label": "AWS Well-Architected Reliability Pillar \u2014 Resilience design", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Testing reliabilit", "type": "FrameworkClause", "label": "AWS Well-Architected Reliability Pillar \u2014 Testing reliabilit", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:Failure management \u2014 recovery procedures", "type": "FrameworkClause", "label": "Failure management \u2014 recovery procedures", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:Failure management \u2014 RTO/RPO alignment", "type": "FrameworkClause", "label": "Failure management \u2014 RTO/RPO alignment", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:Foundations \u2014 organizational prerequisites for reliability", "type": "FrameworkClause", "label": "Foundations \u2014 organizational prerequisites for reliability", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:REL 1", "type": "FrameworkClause", "label": "REL 1", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:REL 10", "type": "FrameworkClause", "label": "REL 10", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:REL 11", "type": "FrameworkClause", "label": "REL 11", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:REL 12", "type": "FrameworkClause", "label": "REL 12", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:REL 13", "type": "FrameworkClause", "label": "REL 13", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:REL 5", "type": "FrameworkClause", "label": "REL 5", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:REL 6", "type": "FrameworkClause", "label": "REL 6", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:REL 8", "type": "FrameworkClause", "label": "REL 8", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:REL 9", "type": "FrameworkClause", "label": "REL 9", "framework": "aws_reliability" }, { "id": "clause:aws_reliability:Resilience design principles", "type": "FrameworkClause", "label": "Resilience design principles", "framework": "aws_reliability" }, { "id": "clause:bcbs_239:Principle 10", "type": "FrameworkClause", "label": "Principle 10", "framework": "bcbs_239" }, { "id": "clause:bcbs_239:Principle 11", "type": "FrameworkClause", "label": "Principle 11", "framework": "bcbs_239" }, { "id": "clause:bcbs_239:Principle 2", "type": "FrameworkClause", "label": "Principle 2", "framework": "bcbs_239" }, { "id": "clause:bcbs_239:Principle 3", "type": "FrameworkClause", "label": "Principle 3", "framework": "bcbs_239" }, { "id": "clause:bcbs_239:Principle 7", "type": "FrameworkClause", "label": "Principle 7", "framework": "bcbs_239" }, { "id": "clause:bcbs_239:Principle 8", "type": "FrameworkClause", "label": "Principle 8", "framework": "bcbs_239" }, { "id": "clause:bcbs_239:Principle 9", "type": "FrameworkClause", "label": "Principle 9", "framework": "bcbs_239" }, { "id": "clause:bcbs_239:Principles 2 & 3", "type": "FrameworkClause", "label": "Principles 2 & 3", "framework": "bcbs_239" }, { "id": "clause:bcbs_239:Principles 2-4", "type": "FrameworkClause", "label": "Principles 2-4", "framework": "bcbs_239" }, { "id": "clause:c2pa:Content Credentials (C2PA manifests)", "type": "FrameworkClause", "label": "Content Credentials (C2PA manifests)", "framework": "c2pa" }, { "id": "clause:ccpa:1798.100", "type": "FrameworkClause", "label": "1798.100", "framework": "ccpa" }, { "id": "clause:ccpa:1798.105", "type": "FrameworkClause", "label": "1798.105", "framework": "ccpa" }, { "id": "clause:ccpa:1798.110", "type": "FrameworkClause", "label": "1798.110", "framework": "ccpa" }, { "id": "clause:ccpa:1798.120", "type": "FrameworkClause", "label": "1798.120", "framework": "ccpa" }, { "id": "clause:ccpa:1798.121", "type": "FrameworkClause", "label": "1798.121", "framework": "ccpa" }, { "id": "clause:ccpa:1798.130", "type": "FrameworkClause", "label": "1798.130", "framework": "ccpa" }, { "id": "clause:ccpa:1798.135", "type": "FrameworkClause", "label": "1798.135", "framework": "ccpa" }, { "id": "clause:ccpa:1798.140", "type": "FrameworkClause", "label": "1798.140", "framework": "ccpa" }, { "id": "clause:ccpa:1798.150", "type": "FrameworkClause", "label": "1798.150", "framework": "ccpa" }, { "id": "clause:ccpa:1798.185", "type": "FrameworkClause", "label": "1798.185", "framework": "ccpa" }, { "id": "clause:cfpb_ai:Circular 2022-03 \u2014 adverse action for credit decisions based", "type": "FrameworkClause", "label": "Circular 2022-03 \u2014 adverse action for credit decisions based", "framework": "cfpb_ai" }, { "id": "clause:cis_controls_v8:CIS Control 11", "type": "FrameworkClause", "label": "CIS Control 11", "framework": "cis_controls_v8" }, { "id": "clause:cis_controls_v8:Control 11", "type": "FrameworkClause", "label": "Control 11", "framework": "cis_controls_v8" }, { "id": "clause:cis_controls_v8:Control 16", "type": "FrameworkClause", "label": "Control 16", "framework": "cis_controls_v8" }, { "id": "clause:cis_controls_v8:Control 8.2", "type": "FrameworkClause", "label": "Control 8.2", "framework": "cis_controls_v8" }, { "id": "clause:cisa_ai_guidance:Line of Effort 2", "type": "FrameworkClause", "label": "Line of Effort 2", "framework": "cisa_ai_guidance" }, { "id": "clause:cisa_ai_guidance:Line of Effort 3", "type": "FrameworkClause", "label": "Line of Effort 3", "framework": "cisa_ai_guidance" }, { "id": "clause:cisa_ai_guidance:Line of Effort 4", "type": "FrameworkClause", "label": "Line of Effort 4", "framework": "cisa_ai_guidance" }, { "id": "clause:cisa_zt:Governance (cross-cutting capability)", "type": "FrameworkClause", "label": "Governance (cross-cutting capability)", "framework": "cisa_zt" }, { "id": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "FrameworkClause", "label": "Identity Pillar \u2014 Access Management", "framework": "cisa_zt" }, { "id": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "FrameworkClause", "label": "Identity Pillar \u2014 Authentication", "framework": "cisa_zt" }, { "id": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "FrameworkClause", "label": "Identity Pillar \u2014 Identity Stores", "framework": "cisa_zt" }, { "id": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "type": "FrameworkClause", "label": "Identity Pillar \u2014 Risk Assessments", "framework": "cisa_zt" }, { "id": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "FrameworkClause", "label": "Visibility and Analytics (cross-cutting capability)", "framework": "cisa_zt" }, { "id": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 DDoS protection and load balancing f", "type": "FrameworkClause", "label": "Cloudflare Resilience \u2014 DDoS protection and load balancing f", "framework": "cloudflare_resilience" }, { "id": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Edge resilience patterns: stateless", "type": "FrameworkClause", "label": "Cloudflare Resilience \u2014 Edge resilience patterns: stateless", "framework": "cloudflare_resilience" }, { "id": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Load balancing and failover, DDoS pr", "type": "FrameworkClause", "label": "Cloudflare Resilience \u2014 Load balancing and failover, DDoS pr", "framework": "cloudflare_resilience" }, { "id": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Rate limiting for API protection and", "type": "FrameworkClause", "label": "Cloudflare Resilience \u2014 Rate limiting for API protection and", "framework": "cloudflare_resilience" }, { "id": "clause:cloudflare_resilience:Load balancing and failover \u2013 Geo-distributed AI inference e", "type": "FrameworkClause", "label": "Load balancing and failover \u2013 Geo-distributed AI inference e", "framework": "cloudflare_resilience" }, { "id": "clause:cloudflare_resilience:Load balancing and failover \u2013 Multi-origin failover for AI A", "type": "FrameworkClause", "label": "Load balancing and failover \u2013 Multi-origin failover for AI A", "framework": "cloudflare_resilience" }, { "id": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health checks and origin valid", "type": "FrameworkClause", "label": "Load balancing and failover \u2014 Health checks and origin valid", "framework": "cloudflare_resilience" }, { "id": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based origin routing", "type": "FrameworkClause", "label": "Load balancing and failover \u2014 Health-based origin routing", "framework": "cloudflare_resilience" }, { "id": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based steering policies", "type": "FrameworkClause", "label": "Load balancing and failover \u2014 Health-based steering policies", "framework": "cloudflare_resilience" }, { "id": "clause:cloudflare_resilience:Rate limiting and DDoS protection", "type": "FrameworkClause", "label": "Rate limiting and DDoS protection", "framework": "cloudflare_resilience" }, { "id": "clause:cloudflare_resilience:Rate limiting for API protection", "type": "FrameworkClause", "label": "Rate limiting for API protection", "framework": "cloudflare_resilience" }, { "id": "clause:cnil_ai:How-to sheet 2 \u2014 Defining a purpose", "type": "FrameworkClause", "label": "How-to sheet 2 \u2014 Defining a purpose", "framework": "cnil_ai" }, { "id": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "type": "FrameworkClause", "label": "\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "framework": "co_ai_act" }, { "id": "clause:cobit_2019:APO01", "type": "FrameworkClause", "label": "APO01", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:APO01.06", "type": "FrameworkClause", "label": "APO01.06", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:APO02.06", "type": "FrameworkClause", "label": "APO02.06", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:APO04.04", "type": "FrameworkClause", "label": "APO04.04", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:APO07", "type": "FrameworkClause", "label": "APO07", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:APO09.04", "type": "FrameworkClause", "label": "APO09.04", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:APO10.03", "type": "FrameworkClause", "label": "APO10.03", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:APO11.03", "type": "FrameworkClause", "label": "APO11.03", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:APO11.04", "type": "FrameworkClause", "label": "APO11.04", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:APO11.05", "type": "FrameworkClause", "label": "APO11.05", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:APO12.02", "type": "FrameworkClause", "label": "APO12.02", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:APO12.04", "type": "FrameworkClause", "label": "APO12.04", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:APO12.06", "type": "FrameworkClause", "label": "APO12.06", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:APO14.01", "type": "FrameworkClause", "label": "APO14.01", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:BAI02.01", "type": "FrameworkClause", "label": "BAI02.01", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:BAI03.02", "type": "FrameworkClause", "label": "BAI03.02", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:BAI03.07", "type": "FrameworkClause", "label": "BAI03.07", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:BAI03.08", "type": "FrameworkClause", "label": "BAI03.08", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:DSS01.03", "type": "FrameworkClause", "label": "DSS01.03", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:DSS02.02", "type": "FrameworkClause", "label": "DSS02.02", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:DSS02.07", "type": "FrameworkClause", "label": "DSS02.07", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:DSS04.07", "type": "FrameworkClause", "label": "DSS04.07", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:DSS05.04", "type": "FrameworkClause", "label": "DSS05.04", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:DSS06.03", "type": "FrameworkClause", "label": "DSS06.03", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:DSS06.04", "type": "FrameworkClause", "label": "DSS06.04", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:DSS06.05", "type": "FrameworkClause", "label": "DSS06.05", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:EDM01", "type": "FrameworkClause", "label": "EDM01", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:MEA01", "type": "FrameworkClause", "label": "MEA01", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:MEA01.04", "type": "FrameworkClause", "label": "MEA01.04", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:MEA01.05", "type": "FrameworkClause", "label": "MEA01.05", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:MEA02", "type": "FrameworkClause", "label": "MEA02", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:MEA02.01", "type": "FrameworkClause", "label": "MEA02.01", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:MEA02.02", "type": "FrameworkClause", "label": "MEA02.02", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:MEA02.04", "type": "FrameworkClause", "label": "MEA02.04", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:MEA03", "type": "FrameworkClause", "label": "MEA03", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:MEA03.01", "type": "FrameworkClause", "label": "MEA03.01", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:MEA03.02", "type": "FrameworkClause", "label": "MEA03.02", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:MEA03.03", "type": "FrameworkClause", "label": "MEA03.03", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:MEA03.04", "type": "FrameworkClause", "label": "MEA03.04", "framework": "cobit_2019" }, { "id": "clause:cobit_2019:MEA04", "type": "FrameworkClause", "label": "MEA04", "framework": "cobit_2019" }, { "id": "clause:cobit_dss04:DSS04.01", "type": "FrameworkClause", "label": "DSS04.01", "framework": "cobit_dss04" }, { "id": "clause:cobit_dss04:DSS04.02", "type": "FrameworkClause", "label": "DSS04.02", "framework": "cobit_dss04" }, { "id": "clause:cobit_dss04:DSS04.03", "type": "FrameworkClause", "label": "DSS04.03", "framework": "cobit_dss04" }, { "id": "clause:cobit_dss04:DSS04.04", "type": "FrameworkClause", "label": "DSS04.04", "framework": "cobit_dss04" }, { "id": "clause:cobit_dss04:DSS04.05", "type": "FrameworkClause", "label": "DSS04.05", "framework": "cobit_dss04" }, { "id": "clause:cobit_dss04:DSS04.05 \u2014 Review, Maintain, and Improve Continuity Plans", "type": "FrameworkClause", "label": "DSS04.05 \u2014 Review, Maintain, and Improve Continuity Plans", "framework": "cobit_dss04" }, { "id": "clause:cobit_dss04:DSS04.06", "type": "FrameworkClause", "label": "DSS04.06", "framework": "cobit_dss04" }, { "id": "clause:cobit_dss04:DSS04.08", "type": "FrameworkClause", "label": "DSS04.08", "framework": "cobit_dss04" }, { "id": "clause:coso_erm:Component 1 \u2014 Attract and Retain Capable Individuals", "type": "FrameworkClause", "label": "Component 1 \u2014 Attract and Retain Capable Individuals", "framework": "coso_erm" }, { "id": "clause:coso_erm:Component 1 \u2014 Board Oversight", "type": "FrameworkClause", "label": "Component 1 \u2014 Board Oversight", "framework": "coso_erm" }, { "id": "clause:coso_erm:Component 1 \u2014 Governance and Culture", "type": "FrameworkClause", "label": "Component 1 \u2014 Governance and Culture", "framework": "coso_erm" }, { "id": "clause:coso_erm:Component 2 \u2014 Risk Appetite", "type": "FrameworkClause", "label": "Component 2 \u2014 Risk Appetite", "framework": "coso_erm" }, { "id": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "type": "FrameworkClause", "label": "Component 2 \u2014 Strategy and Objective-Setting", "framework": "coso_erm" }, { "id": "clause:coso_erm:Component 2: Objective Setting", "type": "FrameworkClause", "label": "Component 2: Objective Setting", "framework": "coso_erm" }, { "id": "clause:coso_erm:Component 4 \u2014 Review and Revision", "type": "FrameworkClause", "label": "Component 4 \u2014 Review and Revision", "framework": "coso_erm" }, { "id": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "type": "FrameworkClause", "label": "Component 5 \u2014 Information, Communication, and Reporting", "framework": "coso_erm" }, { "id": "clause:coso_erm:Component 5 \u2014 Reporting", "type": "FrameworkClause", "label": "Component 5 \u2014 Reporting", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "type": "FrameworkClause", "label": "Principle 1 \u2014 Exercises Board Risk Oversight", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 10", "type": "FrameworkClause", "label": "Principle 10", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 10 \u2014 Identifies Risk", "type": "FrameworkClause", "label": "Principle 10 \u2014 Identifies Risk", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 11", "type": "FrameworkClause", "label": "Principle 11", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "type": "FrameworkClause", "label": "Principle 11 \u2014 Assesses Severity of Risk", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 13", "type": "FrameworkClause", "label": "Principle 13", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "type": "FrameworkClause", "label": "Principle 13 \u2014 Implements risk responses", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 13 \u2014 Implements Risk Responses", "type": "FrameworkClause", "label": "Principle 13 \u2014 Implements Risk Responses", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 15", "type": "FrameworkClause", "label": "Principle 15", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "type": "FrameworkClause", "label": "Principle 15 \u2014 Assesses substantial change", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 15 \u2014 Assesses Substantial Change", "type": "FrameworkClause", "label": "Principle 15 \u2014 Assesses Substantial Change", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 16", "type": "FrameworkClause", "label": "Principle 16", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 17", "type": "FrameworkClause", "label": "Principle 17", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 17 \u2014 Pursues Improvement in Enterprise Risk Manage", "type": "FrameworkClause", "label": "Principle 17 \u2014 Pursues Improvement in Enterprise Risk Manage", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "type": "FrameworkClause", "label": "Principle 18 \u2014 Leverages information and technology", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 19", "type": "FrameworkClause", "label": "Principle 19", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 2", "type": "FrameworkClause", "label": "Principle 2", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 2 \u2014 Establishes Operating Structures", "type": "FrameworkClause", "label": "Principle 2 \u2014 Establishes Operating Structures", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 20", "type": "FrameworkClause", "label": "Principle 20", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 20 \u2014 Reports on risk, culture, and performance", "type": "FrameworkClause", "label": "Principle 20 \u2014 Reports on risk, culture, and performance", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 5", "type": "FrameworkClause", "label": "Principle 5", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 6", "type": "FrameworkClause", "label": "Principle 6", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 7 \u2014 Defines risk appetite", "type": "FrameworkClause", "label": "Principle 7 \u2014 Defines risk appetite", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "type": "FrameworkClause", "label": "Principle 7 \u2014 Defines Risk Appetite", "framework": "coso_erm" }, { "id": "clause:coso_erm:Principle 9 \u2014 Formulates business objectives", "type": "FrameworkClause", "label": "Principle 9 \u2014 Formulates business objectives", "framework": "coso_erm" }, { "id": "clause:coso_icfr:Component 1", "type": "FrameworkClause", "label": "Component 1", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Component 1 \u2014 Control Environment", "type": "FrameworkClause", "label": "Component 1 \u2014 Control Environment", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Component 2", "type": "FrameworkClause", "label": "Component 2", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Component 2 \u2014 Risk Assessment", "type": "FrameworkClause", "label": "Component 2 \u2014 Risk Assessment", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Component 3 \u2014 Control Activities", "type": "FrameworkClause", "label": "Component 3 \u2014 Control Activities", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "type": "FrameworkClause", "label": "Component 5 \u2014 Monitoring Activities", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Principle 10", "type": "FrameworkClause", "label": "Principle 10", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Principle 11", "type": "FrameworkClause", "label": "Principle 11", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Principle 12", "type": "FrameworkClause", "label": "Principle 12", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Principle 14", "type": "FrameworkClause", "label": "Principle 14", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Principle 16", "type": "FrameworkClause", "label": "Principle 16", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Principle 17", "type": "FrameworkClause", "label": "Principle 17", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Principle 2", "type": "FrameworkClause", "label": "Principle 2", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Principle 2 \u2014 Control Environment", "type": "FrameworkClause", "label": "Principle 2 \u2014 Control Environment", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Principle 3", "type": "FrameworkClause", "label": "Principle 3", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Principle 6", "type": "FrameworkClause", "label": "Principle 6", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Principles 10-11", "type": "FrameworkClause", "label": "Principles 10-11", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Principles 10-12", "type": "FrameworkClause", "label": "Principles 10-12", "framework": "coso_icfr" }, { "id": "clause:coso_icfr:Principles 16-17", "type": "FrameworkClause", "label": "Principles 16-17", "framework": "coso_icfr" }, { "id": "clause:csa_ai_caiq:GRC-07", "type": "FrameworkClause", "label": "GRC-07", "framework": "csa_ai_caiq" }, { "id": "clause:csa_aicm:AIS-05", "type": "FrameworkClause", "label": "AIS-05", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:AIS-09", "type": "FrameworkClause", "label": "AIS-09", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:AIS-10", "type": "FrameworkClause", "label": "AIS-10", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:AIS-11", "type": "FrameworkClause", "label": "AIS-11", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:AIS-13", "type": "FrameworkClause", "label": "AIS-13", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:AIS-15", "type": "FrameworkClause", "label": "AIS-15", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:CCC-01", "type": "FrameworkClause", "label": "CCC-01", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:CCC-02", "type": "FrameworkClause", "label": "CCC-02", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:CCC-03", "type": "FrameworkClause", "label": "CCC-03", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:CCC-04", "type": "FrameworkClause", "label": "CCC-04", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:CCC-06", "type": "FrameworkClause", "label": "CCC-06", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:DSP-10", "type": "FrameworkClause", "label": "DSP-10", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:DSP-17", "type": "FrameworkClause", "label": "DSP-17", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:DSP-20", "type": "FrameworkClause", "label": "DSP-20", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:DSP-21", "type": "FrameworkClause", "label": "DSP-21", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:DSP-23", "type": "FrameworkClause", "label": "DSP-23", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "type": "FrameworkClause", "label": "GRC (Governance, Risk & Compliance)", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "type": "FrameworkClause", "label": "GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:GRC (operational / cost risk)", "type": "FrameworkClause", "label": "GRC (operational / cost risk)", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:GRC-01", "type": "FrameworkClause", "label": "GRC-01", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:GRC-02", "type": "FrameworkClause", "label": "GRC-02", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:GRC-06", "type": "FrameworkClause", "label": "GRC-06", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:I&S-03", "type": "FrameworkClause", "label": "I&S-03", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:I&S-06", "type": "FrameworkClause", "label": "I&S-06", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:IAM-03", "type": "FrameworkClause", "label": "IAM-03", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:IAM-05", "type": "FrameworkClause", "label": "IAM-05", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:IAM-08", "type": "FrameworkClause", "label": "IAM-08", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:IAM-10", "type": "FrameworkClause", "label": "IAM-10", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:IAM-12", "type": "FrameworkClause", "label": "IAM-12", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:IAM-14", "type": "FrameworkClause", "label": "IAM-14", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:IAM-15", "type": "FrameworkClause", "label": "IAM-15", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:IAM-18", "type": "FrameworkClause", "label": "IAM-18", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:LOG-03", "type": "FrameworkClause", "label": "LOG-03", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:LOG-05", "type": "FrameworkClause", "label": "LOG-05", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:LOG-07", "type": "FrameworkClause", "label": "LOG-07", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:LOG-09", "type": "FrameworkClause", "label": "LOG-09", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:LOG-16", "type": "FrameworkClause", "label": "LOG-16", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:MDS-06", "type": "FrameworkClause", "label": "MDS-06", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:MDS-08", "type": "FrameworkClause", "label": "MDS-08", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:MDS-09", "type": "FrameworkClause", "label": "MDS-09", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:MDS-12", "type": "FrameworkClause", "label": "MDS-12", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:SEF-06", "type": "FrameworkClause", "label": "SEF-06", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:SEF-09", "type": "FrameworkClause", "label": "SEF-09", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:STA-08", "type": "FrameworkClause", "label": "STA-08", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:STA-09", "type": "FrameworkClause", "label": "STA-09", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:TVM (Threat & Vulnerability Management \u2014 Security Testing)", "type": "FrameworkClause", "label": "TVM (Threat & Vulnerability Management \u2014 Security Testing)", "framework": "csa_aicm" }, { "id": "clause:csa_aicm:TVM-05", "type": "FrameworkClause", "label": "TVM-05", "framework": "csa_aicm" }, { "id": "clause:csa_aismm:APP-02.2", "type": "FrameworkClause", "label": "APP-02.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:APP-03.2", "type": "FrameworkClause", "label": "APP-03.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:APP-03.3", "type": "FrameworkClause", "label": "APP-03.3", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:APP-04.1", "type": "FrameworkClause", "label": "APP-04.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:APP-04.2", "type": "FrameworkClause", "label": "APP-04.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:APP-04.3", "type": "FrameworkClause", "label": "APP-04.3", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:APP-05.2", "type": "FrameworkClause", "label": "APP-05.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:DAT-02.1", "type": "FrameworkClause", "label": "DAT-02.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:DAT-03.3", "type": "FrameworkClause", "label": "DAT-03.3", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:DAT-04.1", "type": "FrameworkClause", "label": "DAT-04.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:DAT-04.2", "type": "FrameworkClause", "label": "DAT-04.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:DAT-05.2", "type": "FrameworkClause", "label": "DAT-05.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:DEV-02.2", "type": "FrameworkClause", "label": "DEV-02.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:DEV-03.1", "type": "FrameworkClause", "label": "DEV-03.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:DEV-03.2", "type": "FrameworkClause", "label": "DEV-03.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:DEV-03.3", "type": "FrameworkClause", "label": "DEV-03.3", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:DEV-04.1", "type": "FrameworkClause", "label": "DEV-04.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:DEV-04.2", "type": "FrameworkClause", "label": "DEV-04.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:GOV-03.1", "type": "FrameworkClause", "label": "GOV-03.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:GOV-03.3", "type": "FrameworkClause", "label": "GOV-03.3", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:GOV-04.3", "type": "FrameworkClause", "label": "GOV-04.3", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:GOV-05.1", "type": "FrameworkClause", "label": "GOV-05.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IAM-02.2", "type": "FrameworkClause", "label": "IAM-02.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IAM-03.1", "type": "FrameworkClause", "label": "IAM-03.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IAM-03.3", "type": "FrameworkClause", "label": "IAM-03.3", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IAM-04.1", "type": "FrameworkClause", "label": "IAM-04.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IAM-04.2", "type": "FrameworkClause", "label": "IAM-04.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IAM-04.3", "type": "FrameworkClause", "label": "IAM-04.3", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IAM-05.1", "type": "FrameworkClause", "label": "IAM-05.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IAM-05.2", "type": "FrameworkClause", "label": "IAM-05.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IAM-05.3", "type": "FrameworkClause", "label": "IAM-05.3", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:INF-03.3", "type": "FrameworkClause", "label": "INF-03.3", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:INF-04.1", "type": "FrameworkClause", "label": "INF-04.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:INF-04.3", "type": "FrameworkClause", "label": "INF-04.3", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IR-02.1", "type": "FrameworkClause", "label": "IR-02.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IR-04.1", "type": "FrameworkClause", "label": "IR-04.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IR-04.3", "type": "FrameworkClause", "label": "IR-04.3", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IR-05.1", "type": "FrameworkClause", "label": "IR-05.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:IR-05.2", "type": "FrameworkClause", "label": "IR-05.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:MOD-02.2", "type": "FrameworkClause", "label": "MOD-02.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:MOD-04.1", "type": "FrameworkClause", "label": "MOD-04.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:MOD-05.1", "type": "FrameworkClause", "label": "MOD-05.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:MON-02.1", "type": "FrameworkClause", "label": "MON-02.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:MON-03.1", "type": "FrameworkClause", "label": "MON-03.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:MON-03.2", "type": "FrameworkClause", "label": "MON-03.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:MON-04.1", "type": "FrameworkClause", "label": "MON-04.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:MON-04.2", "type": "FrameworkClause", "label": "MON-04.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:MON-04.3", "type": "FrameworkClause", "label": "MON-04.3", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:MON-05.2", "type": "FrameworkClause", "label": "MON-05.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:ORG-02.1", "type": "FrameworkClause", "label": "ORG-02.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:ORG-04.2", "type": "FrameworkClause", "label": "ORG-04.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:ORG-05.1", "type": "FrameworkClause", "label": "ORG-05.1", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:RSK-02.2", "type": "FrameworkClause", "label": "RSK-02.2", "framework": "csa_aismm" }, { "id": "clause:csa_aismm:RSK-05.2", "type": "FrameworkClause", "label": "RSK-05.2", "framework": "csa_aismm" }, { "id": "clause:dama_dmbok:Ch. 10", "type": "FrameworkClause", "label": "Ch. 10", "framework": "dama_dmbok" }, { "id": "clause:dama_dmbok:Ch. 12", "type": "FrameworkClause", "label": "Ch. 12", "framework": "dama_dmbok" }, { "id": "clause:dama_dmbok:Ch. 13", "type": "FrameworkClause", "label": "Ch. 13", "framework": "dama_dmbok" }, { "id": "clause:dama_dmbok:Ch. 14", "type": "FrameworkClause", "label": "Ch. 14", "framework": "dama_dmbok" }, { "id": "clause:dama_dmbok:Ch. 15", "type": "FrameworkClause", "label": "Ch. 15", "framework": "dama_dmbok" }, { "id": "clause:dama_dmbok:Ch. 3", "type": "FrameworkClause", "label": "Ch. 3", "framework": "dama_dmbok" }, { "id": "clause:dama_dmbok:Ch. 4", "type": "FrameworkClause", "label": "Ch. 4", "framework": "dama_dmbok" }, { "id": "clause:dama_dmbok:Ch. 6", "type": "FrameworkClause", "label": "Ch. 6", "framework": "dama_dmbok" }, { "id": "clause:dama_dmbok:Ch. 7", "type": "FrameworkClause", "label": "Ch. 7", "framework": "dama_dmbok" }, { "id": "clause:dama_dmbok:Ch. 8", "type": "FrameworkClause", "label": "Ch. 8", "framework": "dama_dmbok" }, { "id": "clause:dama_dmbok:Ch. 9", "type": "FrameworkClause", "label": "Ch. 9", "framework": "dama_dmbok" }, { "id": "clause:data_contract_spec:Schema and Terms sections", "type": "FrameworkClause", "label": "Schema and Terms sections", "framework": "data_contract_spec" }, { "id": "clause:databricks_unity:Column-Level Lineage", "type": "FrameworkClause", "label": "Column-Level Lineage", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Data lineage and catalog metadata", "type": "FrameworkClause", "label": "Data lineage and catalog metadata", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Databricks Lakehouse Monitoring", "type": "FrameworkClause", "label": "Databricks Lakehouse Monitoring", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Databricks Lakehouse Monitoring \u2014 Metric Tables", "type": "FrameworkClause", "label": "Databricks Lakehouse Monitoring \u2014 Metric Tables", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Delta Lake \u2014 time travel and version history", "type": "FrameworkClause", "label": "Delta Lake \u2014 time travel and version history", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Delta Lake schema enforcement and evolution", "type": "FrameworkClause", "label": "Delta Lake schema enforcement and evolution", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Delta Lake time travel", "type": "FrameworkClause", "label": "Delta Lake time travel", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Delta Sharing (open protocol)", "type": "FrameworkClause", "label": "Delta Sharing (open protocol)", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "type": "FrameworkClause", "label": "Lakeflow Declarative Pipelines (DLT) expectations", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Lakehouse Monitoring", "type": "FrameworkClause", "label": "Lakehouse Monitoring", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Unity Catalog", "type": "FrameworkClause", "label": "Unity Catalog", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Unity Catalog \u2014 Data Lineage and Auditing", "type": "FrameworkClause", "label": "Unity Catalog \u2014 Data Lineage and Auditing", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Unity Catalog \u2014 data lineage for ingestion jobs", "type": "FrameworkClause", "label": "Unity Catalog \u2014 data lineage for ingestion jobs", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Unity Catalog \u2014 External Locations and Credentials", "type": "FrameworkClause", "label": "Unity Catalog \u2014 External Locations and Credentials", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Unity Catalog \u2014 fine-grained access control", "type": "FrameworkClause", "label": "Unity Catalog \u2014 fine-grained access control", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Unity Catalog \u2014 Tags and Column-Level Security", "type": "FrameworkClause", "label": "Unity Catalog \u2014 Tags and Column-Level Security", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Unity Catalog Data Lineage and Impact Analysis", "type": "FrameworkClause", "label": "Unity Catalog Data Lineage and Impact Analysis", "framework": "databricks_unity" }, { "id": "clause:databricks_unity:Unity Catalog lineage", "type": "FrameworkClause", "label": "Unity Catalog lineage", "framework": "databricks_unity" }, { "id": "clause:dcam:Capability 2.1", "type": "FrameworkClause", "label": "Capability 2.1", "framework": "dcam" }, { "id": "clause:dcam:Capability 3.3", "type": "FrameworkClause", "label": "Capability 3.3", "framework": "dcam" }, { "id": "clause:dcam:Capability 5.1", "type": "FrameworkClause", "label": "Capability 5.1", "framework": "dcam" }, { "id": "clause:dcam:Capability 5.2", "type": "FrameworkClause", "label": "Capability 5.2", "framework": "dcam" }, { "id": "clause:dcam:Capability 5.3", "type": "FrameworkClause", "label": "Capability 5.3", "framework": "dcam" }, { "id": "clause:dcam:Capability 6.1", "type": "FrameworkClause", "label": "Capability 6.1", "framework": "dcam" }, { "id": "clause:dcam:Component 3", "type": "FrameworkClause", "label": "Component 3", "framework": "dcam" }, { "id": "clause:dcam:Component 7", "type": "FrameworkClause", "label": "Component 7", "framework": "dcam" }, { "id": "clause:doj_ai:ADA application to algorithmic hiring tools ('screen out' di", "type": "FrameworkClause", "label": "ADA application to algorithmic hiring tools ('screen out' di", "framework": "doj_ai" }, { "id": "clause:dora:11", "type": "FrameworkClause", "label": "11", "framework": "dora" }, { "id": "clause:dora:12", "type": "FrameworkClause", "label": "12", "framework": "dora" }, { "id": "clause:dora:13", "type": "FrameworkClause", "label": "13", "framework": "dora" }, { "id": "clause:dora:17", "type": "FrameworkClause", "label": "17", "framework": "dora" }, { "id": "clause:dora:19", "type": "FrameworkClause", "label": "19", "framework": "dora" }, { "id": "clause:dora:25", "type": "FrameworkClause", "label": "25", "framework": "dora" }, { "id": "clause:dora:26", "type": "FrameworkClause", "label": "26", "framework": "dora" }, { "id": "clause:dora:28", "type": "FrameworkClause", "label": "28", "framework": "dora" }, { "id": "clause:dora:30", "type": "FrameworkClause", "label": "30", "framework": "dora" }, { "id": "clause:dora:5", "type": "FrameworkClause", "label": "5", "framework": "dora" }, { "id": "clause:dora:6", "type": "FrameworkClause", "label": "6", "framework": "dora" }, { "id": "clause:dora:7", "type": "FrameworkClause", "label": "7", "framework": "dora" }, { "id": "clause:dora:9", "type": "FrameworkClause", "label": "9", "framework": "dora" }, { "id": "clause:dpdp:3", "type": "FrameworkClause", "label": "3", "framework": "dpdp" }, { "id": "clause:dpdp:6", "type": "FrameworkClause", "label": "6", "framework": "dpdp" }, { "id": "clause:dpdp:ch. III", "type": "FrameworkClause", "label": "ch. III", "framework": "dpdp" }, { "id": "clause:edpb_opinion_28_2024:3", "type": "FrameworkClause", "label": "3", "framework": "edpb_opinion_28_2024" }, { "id": "clause:edpb_opinion_28_2024:3.2", "type": "FrameworkClause", "label": "3.2", "framework": "edpb_opinion_28_2024" }, { "id": "clause:edpb_opinion_28_2024:3.3", "type": "FrameworkClause", "label": "3.3", "framework": "edpb_opinion_28_2024" }, { "id": "clause:eeoc_ai:Adverse impact assessment under Title VII (Q&A technical ass", "type": "FrameworkClause", "label": "Adverse impact assessment under Title VII (Q&A technical ass", "framework": "eeoc_ai" }, { "id": "clause:eidas2:19a", "type": "FrameworkClause", "label": "19a", "framework": "eidas2" }, { "id": "clause:eidas2:20", "type": "FrameworkClause", "label": "20", "framework": "eidas2" }, { "id": "clause:eidas2:45b", "type": "FrameworkClause", "label": "45b", "framework": "eidas2" }, { "id": "clause:eidas2:5a", "type": "FrameworkClause", "label": "5a", "framework": "eidas2" }, { "id": "clause:eidas2:6", "type": "FrameworkClause", "label": "6", "framework": "eidas2" }, { "id": "clause:eidas2:Regulation (EU) 2024/1183", "type": "FrameworkClause", "label": "Regulation (EU) 2024/1183", "framework": "eidas2" }, { "id": "clause:enisa_ai:Cybersecurity of AI and Standardisation (2023) \u2014 document-le", "type": "FrameworkClause", "label": "Cybersecurity of AI and Standardisation (2023) \u2014 document-le", "framework": "enisa_ai" }, { "id": "clause:etsi_gr_sai_005:5.3", "type": "FrameworkClause", "label": "5.3", "framework": "etsi_gr_sai_005" }, { "id": "clause:etsi_gr_sai_005:6.4", "type": "FrameworkClause", "label": "6.4", "framework": "etsi_gr_sai_005" }, { "id": "clause:eu_ai_act:10", "type": "FrameworkClause", "label": "10", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:11", "type": "FrameworkClause", "label": "11", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:12", "type": "FrameworkClause", "label": "12", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:13", "type": "FrameworkClause", "label": "13", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:14", "type": "FrameworkClause", "label": "14", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:15", "type": "FrameworkClause", "label": "15", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:16", "type": "FrameworkClause", "label": "16", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:17", "type": "FrameworkClause", "label": "17", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:18", "type": "FrameworkClause", "label": "18", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:19", "type": "FrameworkClause", "label": "19", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:20", "type": "FrameworkClause", "label": "20", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:23", "type": "FrameworkClause", "label": "23", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:25", "type": "FrameworkClause", "label": "25", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:26", "type": "FrameworkClause", "label": "26", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:27", "type": "FrameworkClause", "label": "27", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:4", "type": "FrameworkClause", "label": "4", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:43", "type": "FrameworkClause", "label": "43", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:47", "type": "FrameworkClause", "label": "47", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:49", "type": "FrameworkClause", "label": "49", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:5", "type": "FrameworkClause", "label": "5", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:50", "type": "FrameworkClause", "label": "50", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:53", "type": "FrameworkClause", "label": "53", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:55", "type": "FrameworkClause", "label": "55", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:6", "type": "FrameworkClause", "label": "6", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:72", "type": "FrameworkClause", "label": "72", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:73", "type": "FrameworkClause", "label": "73", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:74", "type": "FrameworkClause", "label": "74", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:8", "type": "FrameworkClause", "label": "8", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:85", "type": "FrameworkClause", "label": "85", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:86", "type": "FrameworkClause", "label": "86", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:9", "type": "FrameworkClause", "label": "9", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:Annex III", "type": "FrameworkClause", "label": "Annex III", "framework": "eu_ai_act" }, { "id": "clause:eu_ai_act:Annex IV", "type": "FrameworkClause", "label": "Annex IV", "framework": "eu_ai_act" }, { "id": "clause:eu_charter:1", "type": "FrameworkClause", "label": "1", "framework": "eu_charter" }, { "id": "clause:eu_charter:21", "type": "FrameworkClause", "label": "21", "framework": "eu_charter" }, { "id": "clause:eu_charter:24", "type": "FrameworkClause", "label": "24", "framework": "eu_charter" }, { "id": "clause:eu_charter:26", "type": "FrameworkClause", "label": "26", "framework": "eu_charter" }, { "id": "clause:eu_charter:47", "type": "FrameworkClause", "label": "47", "framework": "eu_charter" }, { "id": "clause:eu_charter:8", "type": "FrameworkClause", "label": "8", "framework": "eu_charter" }, { "id": "clause:eu_data_act:3", "type": "FrameworkClause", "label": "3", "framework": "eu_data_act" }, { "id": "clause:eu_data_gov_act:20", "type": "FrameworkClause", "label": "20", "framework": "eu_data_gov_act" }, { "id": "clause:eu_data_gov_act:5", "type": "FrameworkClause", "label": "5", "framework": "eu_data_gov_act" }, { "id": "clause:fapi_2_0:\u00a75.3.2", "type": "FrameworkClause", "label": "\u00a75.3.2", "framework": "fapi_2_0" }, { "id": "clause:fedramp_20x:KSI-MLA", "type": "FrameworkClause", "label": "KSI-MLA", "framework": "fedramp_20x" }, { "id": "clause:ffiec:IT Handbook \u2014 Development, Acquisition, and Maintenance", "type": "FrameworkClause", "label": "IT Handbook \u2014 Development, Acquisition, and Maintenance", "framework": "ffiec" }, { "id": "clause:finra:Regulatory Notice 24-09 (GenAI and LLMs)", "type": "FrameworkClause", "label": "Regulatory Notice 24-09 (GenAI and LLMs)", "framework": "finra" }, { "id": "clause:ftc_ai:FTC Act \u00a75 (unfair or deceptive practices) \u2014 2021 blog guida", "type": "FrameworkClause", "label": "FTC Act \u00a75 (unfair or deceptive practices) \u2014 2021 blog guida", "framework": "ftc_ai" }, { "id": "clause:gdpr:12", "type": "FrameworkClause", "label": "12", "framework": "gdpr" }, { "id": "clause:gdpr:15", "type": "FrameworkClause", "label": "15", "framework": "gdpr" }, { "id": "clause:gdpr:17", "type": "FrameworkClause", "label": "17", "framework": "gdpr" }, { "id": "clause:gdpr:20", "type": "FrameworkClause", "label": "20", "framework": "gdpr" }, { "id": "clause:gdpr:21", "type": "FrameworkClause", "label": "21", "framework": "gdpr" }, { "id": "clause:gdpr:22", "type": "FrameworkClause", "label": "22", "framework": "gdpr" }, { "id": "clause:gdpr:24", "type": "FrameworkClause", "label": "24", "framework": "gdpr" }, { "id": "clause:gdpr:25", "type": "FrameworkClause", "label": "25", "framework": "gdpr" }, { "id": "clause:gdpr:28", "type": "FrameworkClause", "label": "28", "framework": "gdpr" }, { "id": "clause:gdpr:3", "type": "FrameworkClause", "label": "3", "framework": "gdpr" }, { "id": "clause:gdpr:30", "type": "FrameworkClause", "label": "30", "framework": "gdpr" }, { "id": "clause:gdpr:31", "type": "FrameworkClause", "label": "31", "framework": "gdpr" }, { "id": "clause:gdpr:32", "type": "FrameworkClause", "label": "32", "framework": "gdpr" }, { "id": "clause:gdpr:33", "type": "FrameworkClause", "label": "33", "framework": "gdpr" }, { "id": "clause:gdpr:34", "type": "FrameworkClause", "label": "34", "framework": "gdpr" }, { "id": "clause:gdpr:35", "type": "FrameworkClause", "label": "35", "framework": "gdpr" }, { "id": "clause:gdpr:38", "type": "FrameworkClause", "label": "38", "framework": "gdpr" }, { "id": "clause:gdpr:39", "type": "FrameworkClause", "label": "39", "framework": "gdpr" }, { "id": "clause:gdpr:4", "type": "FrameworkClause", "label": "4", "framework": "gdpr" }, { "id": "clause:gdpr:42", "type": "FrameworkClause", "label": "42", "framework": "gdpr" }, { "id": "clause:gdpr:44", "type": "FrameworkClause", "label": "44", "framework": "gdpr" }, { "id": "clause:gdpr:46", "type": "FrameworkClause", "label": "46", "framework": "gdpr" }, { "id": "clause:gdpr:5", "type": "FrameworkClause", "label": "5", "framework": "gdpr" }, { "id": "clause:gdpr:6", "type": "FrameworkClause", "label": "6", "framework": "gdpr" }, { "id": "clause:gdpr:7", "type": "FrameworkClause", "label": "7", "framework": "gdpr" }, { "id": "clause:gdpr:8", "type": "FrameworkClause", "label": "8", "framework": "gdpr" }, { "id": "clause:gdpr:9", "type": "FrameworkClause", "label": "9", "framework": "gdpr" }, { "id": "clause:gdpr:Chapter V", "type": "FrameworkClause", "label": "Chapter V", "framework": "gdpr" }, { "id": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "type": "FrameworkClause", "label": "Bold innovation \u2014 pursuing AI where likely overall benefits", "framework": "google_ai_principles" }, { "id": "clause:google_ai_principles:Responsible development and deployment \u2014 alignment with wide", "type": "FrameworkClause", "label": "Responsible development and deployment \u2014 alignment with wide", "framework": "google_ai_principles" }, { "id": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "FrameworkClause", "label": "Responsible development and deployment \u2014 appropriate human o", "framework": "google_ai_principles" }, { "id": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "FrameworkClause", "label": "Responsible development and deployment \u2014 mitigating unintend", "framework": "google_ai_principles" }, { "id": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "FrameworkClause", "label": "Responsible development and deployment \u2014 rigorous design, te", "framework": "google_ai_principles" }, { "id": "clause:google_compliance:Certification documentation", "type": "FrameworkClause", "label": "Certification documentation", "framework": "google_compliance" }, { "id": "clause:google_compliance:Compliance report", "type": "FrameworkClause", "label": "Compliance report", "framework": "google_compliance" }, { "id": "clause:google_compliance:Compliance Reports Manager", "type": "FrameworkClause", "label": "Compliance Reports Manager", "framework": "google_compliance" }, { "id": "clause:google_compliance:FedRAMP High", "type": "FrameworkClause", "label": "FedRAMP High", "framework": "google_compliance" }, { "id": "clause:google_compliance:Regulatory guidance", "type": "FrameworkClause", "label": "Regulatory guidance", "framework": "google_compliance" }, { "id": "clause:google_compliance:Shared responsibility matrix", "type": "FrameworkClause", "label": "Shared responsibility matrix", "framework": "google_compliance" }, { "id": "clause:google_dataplex:Auto Data Quality", "type": "FrameworkClause", "label": "Auto Data Quality", "framework": "google_dataplex" }, { "id": "clause:google_dataplex:BigQuery schema management", "type": "FrameworkClause", "label": "BigQuery schema management", "framework": "google_dataplex" }, { "id": "clause:google_dataplex:Cloud Storage \u2014 Object Integrity and Retention Lock", "type": "FrameworkClause", "label": "Cloud Storage \u2014 Object Integrity and Retention Lock", "framework": "google_dataplex" }, { "id": "clause:google_dataplex:Data Lineage API", "type": "FrameworkClause", "label": "Data Lineage API", "framework": "google_dataplex" }, { "id": "clause:google_dataplex:Dataplex Auto Data Quality (scheduled/batch scans)", "type": "FrameworkClause", "label": "Dataplex Auto Data Quality (scheduled/batch scans)", "framework": "google_dataplex" }, { "id": "clause:google_dataplex:Dataplex Data Profile Scans", "type": "FrameworkClause", "label": "Dataplex Data Profile Scans", "framework": "google_dataplex" }, { "id": "clause:google_dataplex:Dataplex Data Quality \u2014 Quality Rules", "type": "FrameworkClause", "label": "Dataplex Data Quality \u2014 Quality Rules", "framework": "google_dataplex" }, { "id": "clause:google_dataplex:Dataplex Universal Catalog (Data Catalog successor)", "type": "FrameworkClause", "label": "Dataplex Universal Catalog (Data Catalog successor)", "framework": "google_dataplex" }, { "id": "clause:google_financial:Cloud IAM", "type": "FrameworkClause", "label": "Cloud IAM", "framework": "google_financial" }, { "id": "clause:google_financial:Explainable AI", "type": "FrameworkClause", "label": "Explainable AI", "framework": "google_financial" }, { "id": "clause:google_financial:Google Cloud compliance offerings", "type": "FrameworkClause", "label": "Google Cloud compliance offerings", "framework": "google_financial" }, { "id": "clause:google_financial:Model Cards", "type": "FrameworkClause", "label": "Model Cards", "framework": "google_financial" }, { "id": "clause:google_financial:Vertex AI Model Monitoring", "type": "FrameworkClause", "label": "Vertex AI Model Monitoring", "framework": "google_financial" }, { "id": "clause:google_financial:Vertex AI Model Registry", "type": "FrameworkClause", "label": "Vertex AI Model Registry", "framework": "google_financial" }, { "id": "clause:google_org_policy:Google Assured Workloads \u2014 Compliance-Certified Service Rest", "type": "FrameworkClause", "label": "Google Assured Workloads \u2014 Compliance-Certified Service Rest", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Assured Workloads \u2014 Continuous Regulatory Contract Co", "type": "FrameworkClause", "label": "Google Assured Workloads \u2014 Continuous Regulatory Contract Co", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Assured Workloads \u2014 Data Sovereignty and Use Restrict", "type": "FrameworkClause", "label": "Google Assured Workloads \u2014 Data Sovereignty and Use Restrict", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Assured Workloads \u2014 Regulatory Obligation Constraint", "type": "FrameworkClause", "label": "Google Assured Workloads \u2014 Regulatory Obligation Constraint", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Assured Workloads \u2014 Sovereign Compliance Conflict Det", "type": "FrameworkClause", "label": "Google Assured Workloads \u2014 Sovereign Compliance Conflict Det", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Admin Activity Audit Logs \u2014 Procurement Event R", "type": "FrameworkClause", "label": "Google Cloud Admin Activity Audit Logs \u2014 Procurement Event R", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Change Det", "type": "FrameworkClause", "label": "Google Cloud Asset Inventory \u2014 Knowledge Resource Change Det", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Version Mo", "type": "FrameworkClause", "label": "Google Cloud Asset Inventory \u2014 Knowledge Resource Version Mo", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Asset Inventory + Organization Policy \u2014 Ongoing", "type": "FrameworkClause", "label": "Google Cloud Asset Inventory + Organization Policy \u2014 Ongoing", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Asset Inventory + Pub/Sub \u2014 Real-Time Policy Ch", "type": "FrameworkClause", "label": "Google Cloud Asset Inventory + Pub/Sub \u2014 Real-Time Policy Ch", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies \u2014 Constraint", "type": "FrameworkClause", "label": "Google Cloud Asset Inventory AnalyzeOrgPolicies \u2014 Constraint", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies + Policy Sim", "type": "FrameworkClause", "label": "Google Cloud Asset Inventory AnalyzeOrgPolicies + Policy Sim", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Immutable Approval Event Records", "type": "FrameworkClause", "label": "Google Cloud Audit Logs \u2014 Immutable Approval Event Records", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Non-Repudiable Principal Binding", "type": "FrameworkClause", "label": "Google Cloud Audit Logs \u2014 Non-Repudiable Principal Binding", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Audit Logs + Policy Analyzer \u2014 Internal Audit E", "type": "FrameworkClause", "label": "Google Cloud Audit Logs + Policy Analyzer \u2014 Internal Audit E", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Custom Org Policy \u2014 Governance Program Coverage", "type": "FrameworkClause", "label": "Google Cloud Custom Org Policy \u2014 Governance Program Coverage", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud IAM Recommender \u2014 Least-Privilege Policy Improv", "type": "FrameworkClause", "label": "Google Cloud IAM Recommender \u2014 Least-Privilege Policy Improv", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud IAM Resource Hierarchy \u2014 Inherited Authority Li", "type": "FrameworkClause", "label": "Google Cloud IAM Resource Hierarchy \u2014 Inherited Authority Li", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Marketplace + Org Policy \u2014 Approved AI Service", "type": "FrameworkClause", "label": "Google Cloud Marketplace + Org Policy \u2014 Approved AI Service", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Org Policy \u2014 Third-Party Integration Restrictio", "type": "FrameworkClause", "label": "Google Cloud Org Policy \u2014 Third-Party Integration Restrictio", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Managed Constraint Compli", "type": "FrameworkClause", "label": "Google Cloud Organization Policy \u2014 Managed Constraint Compli", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Policy Simulation for Con", "type": "FrameworkClause", "label": "Google Cloud Organization Policy \u2014 Policy Simulation for Con", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Resource Constraint Enfor", "type": "FrameworkClause", "label": "Google Cloud Organization Policy \u2014 Resource Constraint Enfor", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Service Usage Restriction", "type": "FrameworkClause", "label": "Google Cloud Organization Policy \u2014 Service Usage Restriction", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Organization Policy + Cloud Asset Inventory \u2014 G", "type": "FrameworkClause", "label": "Google Cloud Organization Policy + Cloud Asset Inventory \u2014 G", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Organization Policy Dry-Run \u2014 Safe Policy Versi", "type": "FrameworkClause", "label": "Google Cloud Organization Policy Dry-Run \u2014 Safe Policy Versi", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Organization Policy Monitoring \u2014 Authority Boun", "type": "FrameworkClause", "label": "Google Cloud Organization Policy Monitoring \u2014 Authority Boun", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Organization Policy Service \u2014 Centralized Machi", "type": "FrameworkClause", "label": "Google Cloud Organization Policy Service \u2014 Centralized Machi", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud PAM Emergency Access \u2014 Justified Time-Bounded B", "type": "FrameworkClause", "label": "Google Cloud PAM Emergency Access \u2014 Justified Time-Bounded B", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud PAM Multi-Level Approval \u2014 Dual-Authorization W", "type": "FrameworkClause", "label": "Google Cloud PAM Multi-Level Approval \u2014 Dual-Authorization W", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Approval-Gated Elev", "type": "FrameworkClause", "label": "Google Cloud Privileged Access Manager \u2014 Approval-Gated Elev", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Multi-Level Approva", "type": "FrameworkClause", "label": "Google Cloud Privileged Access Manager \u2014 Multi-Level Approva", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Cross-Domain Evidence", "type": "FrameworkClause", "label": "Google Cloud Security Command Center \u2014 Cross-Domain Evidence", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Policy Violation Tria", "type": "FrameworkClause", "label": "Google Cloud Security Command Center \u2014 Policy Violation Tria", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud Security Foundations Blueprint \u2014 Pre-Deployment", "type": "FrameworkClause", "label": "Google Cloud Security Foundations Blueprint \u2014 Pre-Deployment", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Cloud SLA Terms + Assured Workloads \u2014 Commitment Enfo", "type": "FrameworkClause", "label": "Google Cloud SLA Terms + Assured Workloads \u2014 Commitment Enfo", "framework": "google_org_policy" }, { "id": "clause:google_org_policy:Google Gemini Enterprise Agent Platform \u2014 Agent Access Contr", "type": "FrameworkClause", "label": "Google Gemini Enterprise Agent Platform \u2014 Agent Access Contr", "framework": "google_org_policy" }, { "id": "clause:google_saif:Agent Observability", "type": "FrameworkClause", "label": "Agent Observability", "framework": "google_saif" }, { "id": "clause:google_saif:Agent Observability (SAIF control)", "type": "FrameworkClause", "label": "Agent Observability (SAIF control)", "framework": "google_saif" }, { "id": "clause:google_saif:Agent Permissions (SAIF control)", "type": "FrameworkClause", "label": "Agent Permissions (SAIF control)", "framework": "google_saif" }, { "id": "clause:google_saif:Agent User Control (SAIF control)", "type": "FrameworkClause", "label": "Agent User Control (SAIF control)", "framework": "google_saif" }, { "id": "clause:google_saif:Core element \u2014 Adapt controls to adjust mitigations and crea", "type": "FrameworkClause", "label": "Core element \u2014 Adapt controls to adjust mitigations and crea", "framework": "google_saif" }, { "id": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "FrameworkClause", "label": "Core element \u2014 Contextualize AI system risks in surrounding", "framework": "google_saif" }, { "id": "clause:google_saif:Core element \u2014 Expand strong security foundations to the AI", "type": "FrameworkClause", "label": "Core element \u2014 Expand strong security foundations to the AI", "framework": "google_saif" }, { "id": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "type": "FrameworkClause", "label": "Core element \u2014 Extend detection and response to bring AI int", "framework": "google_saif" }, { "id": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "type": "FrameworkClause", "label": "Element 1 \u2014 Expand strong security foundations to the AI eco", "framework": "google_saif" }, { "id": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "FrameworkClause", "label": "Element 2 \u2014 Extend detection and response to bring AI into t", "framework": "google_saif" }, { "id": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "FrameworkClause", "label": "Element 3 \u2014 Automate defenses to keep pace with existing and", "framework": "google_saif" }, { "id": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "type": "FrameworkClause", "label": "Element 4 \u2014 Harmonize platform-level controls to ensure cons", "framework": "google_saif" }, { "id": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "FrameworkClause", "label": "Element 5 \u2014 Adapt controls to adjust mitigations and create", "framework": "google_saif" }, { "id": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "type": "FrameworkClause", "label": "Element 6 \u2014 Contextualize AI system risks in surrounding bus", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Admin Activity", "type": "FrameworkClause", "label": "Google Cloud Audit Logs \u2014 Immutable Admin Activity", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Logs", "type": "FrameworkClause", "label": "Google Cloud Audit Logs \u2014 Immutable Logs", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud Audit Logs \u2014 Organization Log Sink", "type": "FrameworkClause", "label": "Google Cloud Audit Logs \u2014 Organization Log Sink", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud IAM \u2014 Dedicated Service Accounts", "type": "FrameworkClause", "label": "Google Cloud IAM \u2014 Dedicated Service Accounts", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud IAM \u2014 HSM Service Account Keys", "type": "FrameworkClause", "label": "Google Cloud IAM \u2014 HSM Service Account Keys", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud IAM Best Practices \u2014 Least Privilege Roles", "type": "FrameworkClause", "label": "Google Cloud IAM Best Practices \u2014 Least Privilege Roles", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud Secret Manager \u2014 Credential Hygiene", "type": "FrameworkClause", "label": "Google Cloud Secret Manager \u2014 Credential Hygiene", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 de-identification A", "type": "FrameworkClause", "label": "Google Cloud Sensitive Data Protection \u2014 de-identification A", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 output inspection a", "type": "FrameworkClause", "label": "Google Cloud Sensitive Data Protection \u2014 output inspection a", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 pseudonymization an", "type": "FrameworkClause", "label": "Google Cloud Sensitive Data Protection \u2014 pseudonymization an", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud Sensitive Data Protection (Cloud DLP)", "type": "FrameworkClause", "label": "Google Cloud Sensitive Data Protection (Cloud DLP)", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud WIF \u2014 External OIDC Verification", "type": "FrameworkClause", "label": "Google Cloud WIF \u2014 External OIDC Verification", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud WIF \u2014 STS Token Exchange", "type": "FrameworkClause", "label": "Google Cloud WIF \u2014 STS Token Exchange", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Keyless Authenti", "type": "FrameworkClause", "label": "Google Cloud Workload Identity Federation \u2014 Keyless Authenti", "framework": "google_saif" }, { "id": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Short Lived Toke", "type": "FrameworkClause", "label": "Google Cloud Workload Identity Federation \u2014 Short Lived Toke", "framework": "google_saif" }, { "id": "clause:google_saif:Google SAIF \u2014 Expand strong security foundations (least-priv", "type": "FrameworkClause", "label": "Google SAIF \u2014 Expand strong security foundations (least-priv", "framework": "google_saif" }, { "id": "clause:google_saif:Google SAIF \u2014 Extend detection and response to AI (behaviora", "type": "FrameworkClause", "label": "Google SAIF \u2014 Extend detection and response to AI (behaviora", "framework": "google_saif" }, { "id": "clause:google_saif:Google Security Command Center \u2014 privilege escalation detect", "type": "FrameworkClause", "label": "Google Security Command Center \u2014 privilege escalation detect", "framework": "google_saif" }, { "id": "clause:google_saif:Google Security Command Center \u2014 Threat Detection", "type": "FrameworkClause", "label": "Google Security Command Center \u2014 Threat Detection", "framework": "google_saif" }, { "id": "clause:google_saif:Incident Response Management (SAIF control)", "type": "FrameworkClause", "label": "Incident Response Management (SAIF control)", "framework": "google_saif" }, { "id": "clause:google_saif:Inferred Sensitive Data risk \u2014 Output Validation and Sanitiz", "type": "FrameworkClause", "label": "Inferred Sensitive Data risk \u2014 Output Validation and Sanitiz", "framework": "google_saif" }, { "id": "clause:google_saif:Inferred Sensitive Data risk \u2014 Training Data Management / Ou", "type": "FrameworkClause", "label": "Inferred Sensitive Data risk \u2014 Training Data Management / Ou", "framework": "google_saif" }, { "id": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "type": "FrameworkClause", "label": "Input Validation and Sanitization (SAIF control)", "framework": "google_saif" }, { "id": "clause:google_saif:Insecure Integrated Component risk", "type": "FrameworkClause", "label": "Insecure Integrated Component risk", "framework": "google_saif" }, { "id": "clause:google_saif:Model and Data Inventory Management", "type": "FrameworkClause", "label": "Model and Data Inventory Management", "framework": "google_saif" }, { "id": "clause:google_saif:Privacy Enhancing Technologies", "type": "FrameworkClause", "label": "Privacy Enhancing Technologies", "framework": "google_saif" }, { "id": "clause:google_saif:Secure-by-Default ML Tooling", "type": "FrameworkClause", "label": "Secure-by-Default ML Tooling", "framework": "google_saif" }, { "id": "clause:google_saif:Sensitive Data Disclosure risk \u2014 Output Validation and Sanit", "type": "FrameworkClause", "label": "Sensitive Data Disclosure risk \u2014 Output Validation and Sanit", "framework": "google_saif" }, { "id": "clause:google_saif:Training Data Management", "type": "FrameworkClause", "label": "Training Data Management", "framework": "google_saif" }, { "id": "clause:google_saif:Training Data Management \u2014 provenance and lineage", "type": "FrameworkClause", "label": "Training Data Management \u2014 provenance and lineage", "framework": "google_saif" }, { "id": "clause:google_saif:Unauthorized Training Data risk \u2014 Training Data Management", "type": "FrameworkClause", "label": "Unauthorized Training Data risk \u2014 Training Data Management", "framework": "google_saif" }, { "id": "clause:google_saif:User Data Management \u2014 mitigates Excessive Data Handling", "type": "FrameworkClause", "label": "User Data Management \u2014 mitigates Excessive Data Handling", "framework": "google_saif" }, { "id": "clause:google_saif:User Data Management \u2014 telemetry and log data", "type": "FrameworkClause", "label": "User Data Management \u2014 telemetry and log data", "framework": "google_saif" }, { "id": "clause:google_sre:Cascading failure prevention", "type": "FrameworkClause", "label": "Cascading failure prevention", "framework": "google_sre" }, { "id": "clause:google_sre:Ch. 14", "type": "FrameworkClause", "label": "Ch. 14", "framework": "google_sre" }, { "id": "clause:google_sre:Ch. 2", "type": "FrameworkClause", "label": "Ch. 2", "framework": "google_sre" }, { "id": "clause:google_sre:Ch. 21", "type": "FrameworkClause", "label": "Ch. 21", "framework": "google_sre" }, { "id": "clause:google_sre:Ch. 22", "type": "FrameworkClause", "label": "Ch. 22", "framework": "google_sre" }, { "id": "clause:google_sre:Ch. 26", "type": "FrameworkClause", "label": "Ch. 26", "framework": "google_sre" }, { "id": "clause:google_sre:Ch. 3", "type": "FrameworkClause", "label": "Ch. 3", "framework": "google_sre" }, { "id": "clause:google_sre:Ch. 32", "type": "FrameworkClause", "label": "Ch. 32", "framework": "google_sre" }, { "id": "clause:google_sre:Ch. 33", "type": "FrameworkClause", "label": "Ch. 33", "framework": "google_sre" }, { "id": "clause:google_sre:Ch. 8", "type": "FrameworkClause", "label": "Ch. 8", "framework": "google_sre" }, { "id": "clause:google_sre:Disaster Recovery Testing (DiRT) and game days", "type": "FrameworkClause", "label": "Disaster Recovery Testing (DiRT) and game days", "framework": "google_sre" }, { "id": "clause:google_sre:Error budget policies", "type": "FrameworkClause", "label": "Error budget policies", "framework": "google_sre" }, { "id": "clause:google_sre:Error budget policies \u2013 Multi-region SLO maintenance and fai", "type": "FrameworkClause", "label": "Error budget policies \u2013 Multi-region SLO maintenance and fai", "framework": "google_sre" }, { "id": "clause:google_sre:Error budget policies \u2014 Service tier definition by SLO", "type": "FrameworkClause", "label": "Error budget policies \u2014 Service tier definition by SLO", "framework": "google_sre" }, { "id": "clause:google_sre:Google SRE \u2014 Incident management, postmortem practices, and", "type": "FrameworkClause", "label": "Google SRE \u2014 Incident management, postmortem practices, and", "framework": "google_sre" }, { "id": "clause:google_sre:Google SRE \u2014 Postmortem practices and error budget policies:", "type": "FrameworkClause", "label": "Google SRE \u2014 Postmortem practices and error budget policies:", "framework": "google_sre" }, { "id": "clause:google_sre:Google SRE \u2014 Postmortem practices and production readiness r", "type": "FrameworkClause", "label": "Google SRE \u2014 Postmortem practices and production readiness r", "framework": "google_sre" }, { "id": "clause:google_sre:Google SRE \u2014 Production readiness review and change manageme", "type": "FrameworkClause", "label": "Google SRE \u2014 Production readiness review and change manageme", "framework": "google_sre" }, { "id": "clause:google_sre:Incident management \u2014 Incident Commander role and structured", "type": "FrameworkClause", "label": "Incident management \u2014 Incident Commander role and structured", "framework": "google_sre" }, { "id": "clause:google_sre:Incident management \u2014 Verification of data consistency befor", "type": "FrameworkClause", "label": "Incident management \u2014 Verification of data consistency befor", "framework": "google_sre" }, { "id": "clause:google_sre:Incident management and postmortem practices", "type": "FrameworkClause", "label": "Incident management and postmortem practices", "framework": "google_sre" }, { "id": "clause:google_sre:Incident management and Production Readiness Review", "type": "FrameworkClause", "label": "Incident management and Production Readiness Review", "framework": "google_sre" }, { "id": "clause:google_sre:Postmortem Culture \u2013 Blameless postmortems with tracked acti", "type": "FrameworkClause", "label": "Postmortem Culture \u2013 Blameless postmortems with tracked acti", "framework": "google_sre" }, { "id": "clause:google_sre:Postmortem practices \u2014 Structured incident report with timel", "type": "FrameworkClause", "label": "Postmortem practices \u2014 Structured incident report with timel", "framework": "google_sre" }, { "id": "clause:google_sre:Postmortem practices \u2014 Timestamped action log and incident t", "type": "FrameworkClause", "label": "Postmortem practices \u2014 Timestamped action log and incident t", "framework": "google_sre" }, { "id": "clause:google_sre:Postmortem practices and PRR \u2013 Resilience evidence from SRE", "type": "FrameworkClause", "label": "Postmortem practices and PRR \u2013 Resilience evidence from SRE", "framework": "google_sre" }, { "id": "clause:google_sre:Production readiness review", "type": "FrameworkClause", "label": "Production readiness review", "framework": "google_sre" }, { "id": "clause:google_sre:Production Readiness Review \u2013 Reliability and resilience con", "type": "FrameworkClause", "label": "Production Readiness Review \u2013 Reliability and resilience con", "framework": "google_sre" }, { "id": "clause:google_sre:Production Readiness Review \u2013 Third-party dependency resilie", "type": "FrameworkClause", "label": "Production Readiness Review \u2013 Third-party dependency resilie", "framework": "google_sre" }, { "id": "clause:google_sre:Production readiness review \u2014 Availability requirements", "type": "FrameworkClause", "label": "Production readiness review \u2014 Availability requirements", "framework": "google_sre" }, { "id": "clause:google_sre:Production Readiness Review \u2014 Data infrastructure recovery r", "type": "FrameworkClause", "label": "Production Readiness Review \u2014 Data infrastructure recovery r", "framework": "google_sre" }, { "id": "clause:google_sre:Production Readiness Review \u2014 Failover procedures and incide", "type": "FrameworkClause", "label": "Production Readiness Review \u2014 Failover procedures and incide", "framework": "google_sre" }, { "id": "clause:google_sre:Production Readiness Review \u2014 Rollback readiness criteria", "type": "FrameworkClause", "label": "Production Readiness Review \u2014 Rollback readiness criteria", "framework": "google_sre" }, { "id": "clause:google_sre:Production readiness review: fault tolerance criteria", "type": "FrameworkClause", "label": "Production readiness review: fault tolerance criteria", "framework": "google_sre" }, { "id": "clause:google_sre:SLO management \u2014 Error budget consumption and SLA breach det", "type": "FrameworkClause", "label": "SLO management \u2014 Error budget consumption and SLA breach det", "framework": "google_sre" }, { "id": "clause:google_sre:SLO/Error Budget Policy \u2013 Defining and enforcing availabilit", "type": "FrameworkClause", "label": "SLO/Error Budget Policy \u2013 Defining and enforcing availabilit", "framework": "google_sre" }, { "id": "clause:google_sre:SLO/SLA management and error budget policies", "type": "FrameworkClause", "label": "SLO/SLA management and error budget policies", "framework": "google_sre" }, { "id": "clause:google_sre:Toil reduction and on-call practices", "type": "FrameworkClause", "label": "Toil reduction and on-call practices", "framework": "google_sre" }, { "id": "clause:google_vertex_rag:Check Grounding API", "type": "FrameworkClause", "label": "Check Grounding API", "framework": "google_vertex_rag" }, { "id": "clause:google_vertex_rag:Grounded generation \u2014 grounding support scores", "type": "FrameworkClause", "label": "Grounded generation \u2014 grounding support scores", "framework": "google_vertex_rag" }, { "id": "clause:google_vertex_rag:Grounded generation \u2014 grounding supports and citations", "type": "FrameworkClause", "label": "Grounded generation \u2014 grounding supports and citations", "framework": "google_vertex_rag" }, { "id": "clause:google_vertex_rag:Grounding \u2014 Data Source Configuration", "type": "FrameworkClause", "label": "Grounding \u2014 Data Source Configuration", "framework": "google_vertex_rag" }, { "id": "clause:google_vertex_rag:Grounding and Citation APIs", "type": "FrameworkClause", "label": "Grounding and Citation APIs", "framework": "google_vertex_rag" }, { "id": "clause:google_vertex_rag:Grounding citations and source attribution", "type": "FrameworkClause", "label": "Grounding citations and source attribution", "framework": "google_vertex_rag" }, { "id": "clause:google_vertex_rag:RAG grounding quality configuration", "type": "FrameworkClause", "label": "RAG grounding quality configuration", "framework": "google_vertex_rag" }, { "id": "clause:google_vertex_rag:Vertex AI RAG \u2014 metadata filters at query time", "type": "FrameworkClause", "label": "Vertex AI RAG \u2014 metadata filters at query time", "framework": "google_vertex_rag" }, { "id": "clause:google_vertex_rag:Vertex AI RAG Engine \u2014 retrieval telemetry and evaluation", "type": "FrameworkClause", "label": "Vertex AI RAG Engine \u2014 retrieval telemetry and evaluation", "framework": "google_vertex_rag" }, { "id": "clause:ibm_ai_fairness:Bias metric selection (metric matched to task and fairness d", "type": "FrameworkClause", "label": "Bias metric selection (metric matched to task and fairness d", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Bias mitigation algorithms (reweighing, adversarial debiasin", "type": "FrameworkClause", "label": "Bias mitigation algorithms (reweighing, adversarial debiasin", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "type": "FrameworkClause", "label": "Bias mitigation algorithms and pipeline-stage metric checks", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Dataset and classifier fairness metrics", "type": "FrameworkClause", "label": "Dataset and classifier fairness metrics", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Demographic parity difference and equalized odds difference", "type": "FrameworkClause", "label": "Demographic parity difference and equalized odds difference", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Disaggregated (subgroup) performance metrics", "type": "FrameworkClause", "label": "Disaggregated (subgroup) performance metrics", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Disparate impact metric", "type": "FrameworkClause", "label": "Disparate impact metric", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Disparate impact metric (four-fifths rule)", "type": "FrameworkClause", "label": "Disparate impact metric (four-fifths rule)", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Fairness metric computation (batch, schedulable on productio", "type": "FrameworkClause", "label": "Fairness metric computation (batch, schedulable on productio", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Fairness metric suite (demographic parity difference, equali", "type": "FrameworkClause", "label": "Fairness metric suite (demographic parity difference, equali", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Fairness metric taxonomy (~70 metrics)", "type": "FrameworkClause", "label": "Fairness metric taxonomy (~70 metrics)", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "type": "FrameworkClause", "label": "Fairness metrics (~70 dataset- and model-level metrics)", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "type": "FrameworkClause", "label": "Fairness metrics (demographic parity difference, equalized o", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "type": "FrameworkClause", "label": "Fairness metrics (demographic parity, equalized odds, dispar", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Fairness metrics (quantitative outcome indicators)", "type": "FrameworkClause", "label": "Fairness metrics (quantitative outcome indicators)", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Fairness metrics (vendor due-diligence benchmark)", "type": "FrameworkClause", "label": "Fairness metrics (vendor due-diligence benchmark)", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Fairness metrics and mitigation algorithms (training curricu", "type": "FrameworkClause", "label": "Fairness metrics and mitigation algorithms (training curricu", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Protected attribute specification (privileged/unprivileged g", "type": "FrameworkClause", "label": "Protected attribute specification (privileged/unprivileged g", "framework": "ibm_ai_fairness" }, { "id": "clause:ibm_ai_fairness:Subgroup fairness metrics and bias mitigation algorithms", "type": "FrameworkClause", "label": "Subgroup fairness metrics and bias mitigation algorithms", "framework": "ibm_ai_fairness" }, { "id": "clause:ieee_7000:\u00a710", "type": "FrameworkClause", "label": "\u00a710", "framework": "ieee_7000" }, { "id": "clause:ieee_7000:\u00a711", "type": "FrameworkClause", "label": "\u00a711", "framework": "ieee_7000" }, { "id": "clause:ieee_7000:\u00a75", "type": "FrameworkClause", "label": "\u00a75", "framework": "ieee_7000" }, { "id": "clause:ieee_7000:\u00a75.4", "type": "FrameworkClause", "label": "\u00a75.4", "framework": "ieee_7000" }, { "id": "clause:ieee_7000:\u00a76.2", "type": "FrameworkClause", "label": "\u00a76.2", "framework": "ieee_7000" }, { "id": "clause:ieee_7000:\u00a77", "type": "FrameworkClause", "label": "\u00a77", "framework": "ieee_7000" }, { "id": "clause:ieee_7000:\u00a77.3", "type": "FrameworkClause", "label": "\u00a77.3", "framework": "ieee_7000" }, { "id": "clause:ieee_7000:\u00a79", "type": "FrameworkClause", "label": "\u00a79", "framework": "ieee_7000" }, { "id": "clause:ieee_7000:\u00a79.3", "type": "FrameworkClause", "label": "\u00a79.3", "framework": "ieee_7000" }, { "id": "clause:ieee_7000:Clause 10", "type": "FrameworkClause", "label": "Clause 10", "framework": "ieee_7000" }, { "id": "clause:ieee_7000:Clause 11", "type": "FrameworkClause", "label": "Clause 11", "framework": "ieee_7000" }, { "id": "clause:ieee_7000:Clause 7", "type": "FrameworkClause", "label": "Clause 7", "framework": "ieee_7000" }, { "id": "clause:ieee_7000:Clause 8", "type": "FrameworkClause", "label": "Clause 8", "framework": "ieee_7000" }, { "id": "clause:ieee_7000:Clause 9", "type": "FrameworkClause", "label": "Clause 9", "framework": "ieee_7000" }, { "id": "clause:imda_mgf:1.2.3", "type": "FrameworkClause", "label": "1.2.3", "framework": "imda_mgf" }, { "id": "clause:imda_mgf:2.1.1", "type": "FrameworkClause", "label": "2.1.1", "framework": "imda_mgf" }, { "id": "clause:imda_mgf:2.1.2", "type": "FrameworkClause", "label": "2.1.2", "framework": "imda_mgf" }, { "id": "clause:imda_mgf:2.2.1", "type": "FrameworkClause", "label": "2.2.1", "framework": "imda_mgf" }, { "id": "clause:imda_mgf:2.2.2", "type": "FrameworkClause", "label": "2.2.2", "framework": "imda_mgf" }, { "id": "clause:imda_mgf:2.3.1", "type": "FrameworkClause", "label": "2.3.1", "framework": "imda_mgf" }, { "id": "clause:imda_mgf:2.3.2", "type": "FrameworkClause", "label": "2.3.2", "framework": "imda_mgf" }, { "id": "clause:imda_mgf:2.3.3", "type": "FrameworkClause", "label": "2.3.3", "framework": "imda_mgf" }, { "id": "clause:imda_mgf:2.4", "type": "FrameworkClause", "label": "2.4", "framework": "imda_mgf" }, { "id": "clause:iso_22301:10.1", "type": "FrameworkClause", "label": "10.1", "framework": "iso_22301" }, { "id": "clause:iso_22301:5.1", "type": "FrameworkClause", "label": "5.1", "framework": "iso_22301" }, { "id": "clause:iso_22301:5.3", "type": "FrameworkClause", "label": "5.3", "framework": "iso_22301" }, { "id": "clause:iso_22301:6.2", "type": "FrameworkClause", "label": "6.2", "framework": "iso_22301" }, { "id": "clause:iso_22301:7.1", "type": "FrameworkClause", "label": "7.1", "framework": "iso_22301" }, { "id": "clause:iso_22301:8.2.2", "type": "FrameworkClause", "label": "8.2.2", "framework": "iso_22301" }, { "id": "clause:iso_22301:8.2.3", "type": "FrameworkClause", "label": "8.2.3", "framework": "iso_22301" }, { "id": "clause:iso_22301:8.3.4", "type": "FrameworkClause", "label": "8.3.4", "framework": "iso_22301" }, { "id": "clause:iso_22301:8.4", "type": "FrameworkClause", "label": "8.4", "framework": "iso_22301" }, { "id": "clause:iso_22301:8.4.2", "type": "FrameworkClause", "label": "8.4.2", "framework": "iso_22301" }, { "id": "clause:iso_22301:8.4.3", "type": "FrameworkClause", "label": "8.4.3", "framework": "iso_22301" }, { "id": "clause:iso_22301:8.4.4", "type": "FrameworkClause", "label": "8.4.4", "framework": "iso_22301" }, { "id": "clause:iso_22301:8.4.5", "type": "FrameworkClause", "label": "8.4.5", "framework": "iso_22301" }, { "id": "clause:iso_22301:8.5", "type": "FrameworkClause", "label": "8.5", "framework": "iso_22301" }, { "id": "clause:iso_22301:9.1", "type": "FrameworkClause", "label": "9.1", "framework": "iso_22301" }, { "id": "clause:iso_22301:9.2", "type": "FrameworkClause", "label": "9.2", "framework": "iso_22301" }, { "id": "clause:iso_23894:4", "type": "FrameworkClause", "label": "4", "framework": "iso_23894" }, { "id": "clause:iso_24760:7", "type": "FrameworkClause", "label": "7", "framework": "iso_24760" }, { "id": "clause:iso_24760:7.2", "type": "FrameworkClause", "label": "7.2", "framework": "iso_24760" }, { "id": "clause:iso_24760:8", "type": "FrameworkClause", "label": "8", "framework": "iso_24760" }, { "id": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "FrameworkClause", "label": "ISO/IEC 24760-2:2015", "framework": "iso_24760" }, { "id": "clause:iso_27001:4", "type": "FrameworkClause", "label": "4", "framework": "iso_27001" }, { "id": "clause:iso_27001:A.5.23", "type": "FrameworkClause", "label": "A.5.23", "framework": "iso_27001" }, { "id": "clause:iso_27001:A.5.31", "type": "FrameworkClause", "label": "A.5.31", "framework": "iso_27001" }, { "id": "clause:iso_27001:A.5.33", "type": "FrameworkClause", "label": "A.5.33", "framework": "iso_27001" }, { "id": "clause:iso_27001:A.5.9", "type": "FrameworkClause", "label": "A.5.9", "framework": "iso_27001" }, { "id": "clause:iso_27001:A.8.15", "type": "FrameworkClause", "label": "A.8.15", "framework": "iso_27001" }, { "id": "clause:iso_27001:A.8.8", "type": "FrameworkClause", "label": "A.8.8", "framework": "iso_27001" }, { "id": "clause:iso_27002:5.10", "type": "FrameworkClause", "label": "5.10", "framework": "iso_27002" }, { "id": "clause:iso_27002:5.12", "type": "FrameworkClause", "label": "5.12", "framework": "iso_27002" }, { "id": "clause:iso_27002:5.15", "type": "FrameworkClause", "label": "5.15", "framework": "iso_27002" }, { "id": "clause:iso_27002:5.19", "type": "FrameworkClause", "label": "5.19", "framework": "iso_27002" }, { "id": "clause:iso_27002:5.36", "type": "FrameworkClause", "label": "5.36", "framework": "iso_27002" }, { "id": "clause:iso_27002:8.10", "type": "FrameworkClause", "label": "8.10", "framework": "iso_27002" }, { "id": "clause:iso_27002:8.15", "type": "FrameworkClause", "label": "8.15", "framework": "iso_27002" }, { "id": "clause:iso_27002:8.8", "type": "FrameworkClause", "label": "8.8", "framework": "iso_27002" }, { "id": "clause:iso_27031:10", "type": "FrameworkClause", "label": "10", "framework": "iso_27031" }, { "id": "clause:iso_27031:11", "type": "FrameworkClause", "label": "11", "framework": "iso_27031" }, { "id": "clause:iso_27031:13", "type": "FrameworkClause", "label": "13", "framework": "iso_27031" }, { "id": "clause:iso_27031:8", "type": "FrameworkClause", "label": "8", "framework": "iso_27031" }, { "id": "clause:iso_27701:5.7.1", "type": "FrameworkClause", "label": "5.7.1", "framework": "iso_27701" }, { "id": "clause:iso_27701:5.7.3", "type": "FrameworkClause", "label": "5.7.3", "framework": "iso_27701" }, { "id": "clause:iso_27701:5.8.2", "type": "FrameworkClause", "label": "5.8.2", "framework": "iso_27701" }, { "id": "clause:iso_27701:6.13", "type": "FrameworkClause", "label": "6.13", "framework": "iso_27701" }, { "id": "clause:iso_27701:6.5.2.1", "type": "FrameworkClause", "label": "6.5.2.1", "framework": "iso_27701" }, { "id": "clause:iso_27701:6.7", "type": "FrameworkClause", "label": "6.7", "framework": "iso_27701" }, { "id": "clause:iso_27701:6.9.4", "type": "FrameworkClause", "label": "6.9.4", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.2", "type": "FrameworkClause", "label": "7.2", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.2.1", "type": "FrameworkClause", "label": "7.2.1", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.2.2", "type": "FrameworkClause", "label": "7.2.2", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.2.3", "type": "FrameworkClause", "label": "7.2.3", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.2.4", "type": "FrameworkClause", "label": "7.2.4", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.2.5", "type": "FrameworkClause", "label": "7.2.5", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.2.8", "type": "FrameworkClause", "label": "7.2.8", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.3", "type": "FrameworkClause", "label": "7.3", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.3.7", "type": "FrameworkClause", "label": "7.3.7", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.3.9", "type": "FrameworkClause", "label": "7.3.9", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.4.1", "type": "FrameworkClause", "label": "7.4.1", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.4.4", "type": "FrameworkClause", "label": "7.4.4", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.4.5", "type": "FrameworkClause", "label": "7.4.5", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.4.7", "type": "FrameworkClause", "label": "7.4.7", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.4.9", "type": "FrameworkClause", "label": "7.4.9", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.5", "type": "FrameworkClause", "label": "7.5", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.5.1", "type": "FrameworkClause", "label": "7.5.1", "framework": "iso_27701" }, { "id": "clause:iso_27701:7.5.3", "type": "FrameworkClause", "label": "7.5.3", "framework": "iso_27701" }, { "id": "clause:iso_27701:8.2", "type": "FrameworkClause", "label": "8.2", "framework": "iso_27701" }, { "id": "clause:iso_27701:8.2.6", "type": "FrameworkClause", "label": "8.2.6", "framework": "iso_27701" }, { "id": "clause:iso_27701:8.3", "type": "FrameworkClause", "label": "8.3", "framework": "iso_27701" }, { "id": "clause:iso_27701:8.5.6", "type": "FrameworkClause", "label": "8.5.6", "framework": "iso_27701" }, { "id": "clause:iso_27701:8.5.8", "type": "FrameworkClause", "label": "8.5.8", "framework": "iso_27701" }, { "id": "clause:iso_27701:PIMS certification (standard as a whole)", "type": "FrameworkClause", "label": "PIMS certification (standard as a whole)", "framework": "iso_27701" }, { "id": "clause:iso_30401:10.1", "type": "FrameworkClause", "label": "10.1", "framework": "iso_30401" }, { "id": "clause:iso_30401:4.4.2", "type": "FrameworkClause", "label": "4.4.2", "framework": "iso_30401" }, { "id": "clause:iso_30401:4.4.3", "type": "FrameworkClause", "label": "4.4.3", "framework": "iso_30401" }, { "id": "clause:iso_30401:5.1", "type": "FrameworkClause", "label": "5.1", "framework": "iso_30401" }, { "id": "clause:iso_30401:5.3", "type": "FrameworkClause", "label": "5.3", "framework": "iso_30401" }, { "id": "clause:iso_30401:6.1", "type": "FrameworkClause", "label": "6.1", "framework": "iso_30401" }, { "id": "clause:iso_30401:7.5", "type": "FrameworkClause", "label": "7.5", "framework": "iso_30401" }, { "id": "clause:iso_30401:7.5.3", "type": "FrameworkClause", "label": "7.5.3", "framework": "iso_30401" }, { "id": "clause:iso_30401:8", "type": "FrameworkClause", "label": "8", "framework": "iso_30401" }, { "id": "clause:iso_30401:9.1", "type": "FrameworkClause", "label": "9.1", "framework": "iso_30401" }, { "id": "clause:iso_30401:9.2", "type": "FrameworkClause", "label": "9.2", "framework": "iso_30401" }, { "id": "clause:iso_30401:9.3", "type": "FrameworkClause", "label": "9.3", "framework": "iso_30401" }, { "id": "clause:iso_31000:6.4", "type": "FrameworkClause", "label": "6.4", "framework": "iso_31000" }, { "id": "clause:iso_31000:6.5", "type": "FrameworkClause", "label": "6.5", "framework": "iso_31000" }, { "id": "clause:iso_31000:6.5.2", "type": "FrameworkClause", "label": "6.5.2", "framework": "iso_31000" }, { "id": "clause:iso_31000:6.6", "type": "FrameworkClause", "label": "6.6", "framework": "iso_31000" }, { "id": "clause:iso_31000:6.7", "type": "FrameworkClause", "label": "6.7", "framework": "iso_31000" }, { "id": "clause:iso_37301:\u00a7 4.6 \u2014 Compliance risk assessment", "type": "FrameworkClause", "label": "\u00a7 4.6 \u2014 Compliance risk assessment", "framework": "iso_37301" }, { "id": "clause:iso_37301:\u00a7 6.3 \u2014 Planning of changes", "type": "FrameworkClause", "label": "\u00a7 6.3 \u2014 Planning of changes", "framework": "iso_37301" }, { "id": "clause:iso_37301:\u00a7 7.2 \u2014 Competence", "type": "FrameworkClause", "label": "\u00a7 7.2 \u2014 Competence", "framework": "iso_37301" }, { "id": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "FrameworkClause", "label": "\u00a7 8.1 \u2014 Operational planning and control", "framework": "iso_37301" }, { "id": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "type": "FrameworkClause", "label": "\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "framework": "iso_37301" }, { "id": "clause:iso_37301:10.1", "type": "FrameworkClause", "label": "10.1", "framework": "iso_37301" }, { "id": "clause:iso_37301:10.2", "type": "FrameworkClause", "label": "10.2", "framework": "iso_37301" }, { "id": "clause:iso_37301:4", "type": "FrameworkClause", "label": "4", "framework": "iso_37301" }, { "id": "clause:iso_37301:4.5", "type": "FrameworkClause", "label": "4.5", "framework": "iso_37301" }, { "id": "clause:iso_37301:4.6", "type": "FrameworkClause", "label": "4.6", "framework": "iso_37301" }, { "id": "clause:iso_37301:5.1", "type": "FrameworkClause", "label": "5.1", "framework": "iso_37301" }, { "id": "clause:iso_37301:5.3", "type": "FrameworkClause", "label": "5.3", "framework": "iso_37301" }, { "id": "clause:iso_37301:6.1", "type": "FrameworkClause", "label": "6.1", "framework": "iso_37301" }, { "id": "clause:iso_37301:6.2", "type": "FrameworkClause", "label": "6.2", "framework": "iso_37301" }, { "id": "clause:iso_37301:7.1", "type": "FrameworkClause", "label": "7.1", "framework": "iso_37301" }, { "id": "clause:iso_37301:7.3", "type": "FrameworkClause", "label": "7.3", "framework": "iso_37301" }, { "id": "clause:iso_37301:7.5", "type": "FrameworkClause", "label": "7.5", "framework": "iso_37301" }, { "id": "clause:iso_37301:7.5.3", "type": "FrameworkClause", "label": "7.5.3", "framework": "iso_37301" }, { "id": "clause:iso_37301:8.1", "type": "FrameworkClause", "label": "8.1", "framework": "iso_37301" }, { "id": "clause:iso_37301:8.2", "type": "FrameworkClause", "label": "8.2", "framework": "iso_37301" }, { "id": "clause:iso_37301:9.1", "type": "FrameworkClause", "label": "9.1", "framework": "iso_37301" }, { "id": "clause:iso_37301:9.1.1", "type": "FrameworkClause", "label": "9.1.1", "framework": "iso_37301" }, { "id": "clause:iso_37301:9.1.2", "type": "FrameworkClause", "label": "9.1.2", "framework": "iso_37301" }, { "id": "clause:iso_37301:9.1.3", "type": "FrameworkClause", "label": "9.1.3", "framework": "iso_37301" }, { "id": "clause:iso_37301:9.1.5", "type": "FrameworkClause", "label": "9.1.5", "framework": "iso_37301" }, { "id": "clause:iso_37301:9.2", "type": "FrameworkClause", "label": "9.2", "framework": "iso_37301" }, { "id": "clause:iso_37301:9.3", "type": "FrameworkClause", "label": "9.3", "framework": "iso_37301" }, { "id": "clause:iso_37301:9.3.2", "type": "FrameworkClause", "label": "9.3.2", "framework": "iso_37301" }, { "id": "clause:iso_42001:10.1", "type": "FrameworkClause", "label": "10.1", "framework": "iso_42001" }, { "id": "clause:iso_42001:10.2", "type": "FrameworkClause", "label": "10.2", "framework": "iso_42001" }, { "id": "clause:iso_42001:4.1", "type": "FrameworkClause", "label": "4.1", "framework": "iso_42001" }, { "id": "clause:iso_42001:4.2", "type": "FrameworkClause", "label": "4.2", "framework": "iso_42001" }, { "id": "clause:iso_42001:4.3", "type": "FrameworkClause", "label": "4.3", "framework": "iso_42001" }, { "id": "clause:iso_42001:5.1", "type": "FrameworkClause", "label": "5.1", "framework": "iso_42001" }, { "id": "clause:iso_42001:5.2", "type": "FrameworkClause", "label": "5.2", "framework": "iso_42001" }, { "id": "clause:iso_42001:5.3", "type": "FrameworkClause", "label": "5.3", "framework": "iso_42001" }, { "id": "clause:iso_42001:6.1", "type": "FrameworkClause", "label": "6.1", "framework": "iso_42001" }, { "id": "clause:iso_42001:6.1.1", "type": "FrameworkClause", "label": "6.1.1", "framework": "iso_42001" }, { "id": "clause:iso_42001:6.1.2", "type": "FrameworkClause", "label": "6.1.2", "framework": "iso_42001" }, { "id": "clause:iso_42001:6.1.3", "type": "FrameworkClause", "label": "6.1.3", "framework": "iso_42001" }, { "id": "clause:iso_42001:6.1.4", "type": "FrameworkClause", "label": "6.1.4", "framework": "iso_42001" }, { "id": "clause:iso_42001:6.3", "type": "FrameworkClause", "label": "6.3", "framework": "iso_42001" }, { "id": "clause:iso_42001:7.1", "type": "FrameworkClause", "label": "7.1", "framework": "iso_42001" }, { "id": "clause:iso_42001:7.2", "type": "FrameworkClause", "label": "7.2", "framework": "iso_42001" }, { "id": "clause:iso_42001:7.4", "type": "FrameworkClause", "label": "7.4", "framework": "iso_42001" }, { "id": "clause:iso_42001:7.5", "type": "FrameworkClause", "label": "7.5", "framework": "iso_42001" }, { "id": "clause:iso_42001:8.1", "type": "FrameworkClause", "label": "8.1", "framework": "iso_42001" }, { "id": "clause:iso_42001:8.3", "type": "FrameworkClause", "label": "8.3", "framework": "iso_42001" }, { "id": "clause:iso_42001:8.4", "type": "FrameworkClause", "label": "8.4", "framework": "iso_42001" }, { "id": "clause:iso_42001:9.1", "type": "FrameworkClause", "label": "9.1", "framework": "iso_42001" }, { "id": "clause:iso_42001:9.2", "type": "FrameworkClause", "label": "9.2", "framework": "iso_42001" }, { "id": "clause:iso_42001:9.3", "type": "FrameworkClause", "label": "9.3", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.10.3", "type": "FrameworkClause", "label": "A.10.3", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.2.2", "type": "FrameworkClause", "label": "A.2.2", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.3.2", "type": "FrameworkClause", "label": "A.3.2", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.4.2", "type": "FrameworkClause", "label": "A.4.2", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.4.4", "type": "FrameworkClause", "label": "A.4.4", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.4.5", "type": "FrameworkClause", "label": "A.4.5", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.5.2", "type": "FrameworkClause", "label": "A.5.2", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.6.2.3", "type": "FrameworkClause", "label": "A.6.2.3", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.6.2.4", "type": "FrameworkClause", "label": "A.6.2.4", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.6.2.5", "type": "FrameworkClause", "label": "A.6.2.5", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.6.2.6", "type": "FrameworkClause", "label": "A.6.2.6", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.6.2.7", "type": "FrameworkClause", "label": "A.6.2.7", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.6.2.8", "type": "FrameworkClause", "label": "A.6.2.8", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.7.2", "type": "FrameworkClause", "label": "A.7.2", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.7.4", "type": "FrameworkClause", "label": "A.7.4", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.7.5", "type": "FrameworkClause", "label": "A.7.5", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.7.6", "type": "FrameworkClause", "label": "A.7.6", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.8.2", "type": "FrameworkClause", "label": "A.8.2", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.8.4", "type": "FrameworkClause", "label": "A.8.4", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.8.5", "type": "FrameworkClause", "label": "A.8.5", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.9.2", "type": "FrameworkClause", "label": "A.9.2", "framework": "iso_42001" }, { "id": "clause:iso_42001:A.9.4", "type": "FrameworkClause", "label": "A.9.4", "framework": "iso_42001" }, { "id": "clause:iso_5259:5259-1", "type": "FrameworkClause", "label": "5259-1", "framework": "iso_5259" }, { "id": "clause:iso_8000:8000-110", "type": "FrameworkClause", "label": "8000-110", "framework": "iso_8000" }, { "id": "clause:iso_8000:8000-120", "type": "FrameworkClause", "label": "8000-120", "framework": "iso_8000" }, { "id": "clause:iso_8000:8000-61", "type": "FrameworkClause", "label": "8000-61", "framework": "iso_8000" }, { "id": "clause:iso_8000:8000-8", "type": "FrameworkClause", "label": "8000-8", "framework": "iso_8000" }, { "id": "clause:itil_4:\u00a75.1.2", "type": "FrameworkClause", "label": "\u00a75.1.2", "framework": "itil_4" }, { "id": "clause:itil_4:\u00a75.1.4", "type": "FrameworkClause", "label": "\u00a75.1.4", "framework": "itil_4" }, { "id": "clause:itil_4:\u00a75.2.4", "type": "FrameworkClause", "label": "\u00a75.2.4", "framework": "itil_4" }, { "id": "clause:itil_4:\u00a75.2.7", "type": "FrameworkClause", "label": "\u00a75.2.7", "framework": "itil_4" }, { "id": "clause:itil_4:Continual Improvement Practice", "type": "FrameworkClause", "label": "Continual Improvement Practice", "framework": "itil_4" }, { "id": "clause:itil_4:Incident Management Practice", "type": "FrameworkClause", "label": "Incident Management Practice", "framework": "itil_4" }, { "id": "clause:lgpd:37", "type": "FrameworkClause", "label": "37", "framework": "lgpd" }, { "id": "clause:llm10:LLM01:2025", "type": "FrameworkClause", "label": "2025", "framework": "llm10" }, { "id": "clause:llm10:LLM03:2025", "type": "FrameworkClause", "label": "2025", "framework": "llm10" }, { "id": "clause:llm10:LLM04:2025", "type": "FrameworkClause", "label": "2025", "framework": "llm10" }, { "id": "clause:llm10:LLM09:2025", "type": "FrameworkClause", "label": "2025", "framework": "llm10" }, { "id": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "FrameworkClause", "label": "Build transparency and reporting mechanisms", "framework": "meta_llama_rai" }, { "id": "clause:meta_llama_rai:Build transparency and reporting mechanisms; Llama Acceptabl", "type": "FrameworkClause", "label": "Build transparency and reporting mechanisms; Llama Acceptabl", "framework": "meta_llama_rai" }, { "id": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "FrameworkClause", "label": "Llama Acceptable Use Policy (separate document)", "framework": "meta_llama_rai" }, { "id": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibited", "type": "FrameworkClause", "label": "Llama Acceptable Use Policy (separate document) \u2014 prohibited", "framework": "meta_llama_rai" }, { "id": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibitio", "type": "FrameworkClause", "label": "Llama Acceptable Use Policy (separate document) \u2014 prohibitio", "framework": "meta_llama_rai" }, { "id": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document); Build trans", "type": "FrameworkClause", "label": "Llama Acceptable Use Policy (separate document); Build trans", "framework": "meta_llama_rai" }, { "id": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance", "type": "FrameworkClause", "label": "Model-level alignment \u2014 Evaluate and improve performance", "framework": "meta_llama_rai" }, { "id": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "FrameworkClause", "label": "Model-level alignment \u2014 Evaluate and improve performance; Re", "framework": "meta_llama_rai" }, { "id": "clause:meta_llama_rai:Responsible AI considerations (fairness and inclusion)", "type": "FrameworkClause", "label": "Responsible AI considerations (fairness and inclusion)", "framework": "meta_llama_rai" }, { "id": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "type": "FrameworkClause", "label": "Responsible LLM product development stages; Model-level alig", "framework": "meta_llama_rai" }, { "id": "clause:meta_llama_rai:Responsible Use Guide (provider guidance); Llama Acceptable", "type": "FrameworkClause", "label": "Responsible Use Guide (provider guidance); Llama Acceptable", "framework": "meta_llama_rai" }, { "id": "clause:meta_llama_rai:System-level alignment \u2014 input/output mitigations; Llama Acc", "type": "FrameworkClause", "label": "System-level alignment \u2014 input/output mitigations; Llama Acc", "framework": "meta_llama_rai" }, { "id": "clause:microsoft_azure_ai:Azure AI Compliance \u2014 Evidence Collection for Audits", "type": "FrameworkClause", "label": "Azure AI Compliance \u2014 Evidence Collection for Audits", "framework": "microsoft_azure_ai" }, { "id": "clause:microsoft_azure_ai:Azure AI Search \u2014 Index Schema", "type": "FrameworkClause", "label": "Azure AI Search \u2014 Index Schema", "framework": "microsoft_azure_ai" }, { "id": "clause:microsoft_azure_ai:Azure AI Search \u2014 monitoring and search traffic analytics", "type": "FrameworkClause", "label": "Azure AI Search \u2014 monitoring and search traffic analytics", "framework": "microsoft_azure_ai" }, { "id": "clause:microsoft_azure_ai:Azure AI Search index scope configuration", "type": "FrameworkClause", "label": "Azure AI Search index scope configuration", "framework": "microsoft_azure_ai" }, { "id": "clause:microsoft_azure_ai:Azure AI Search Security Filters", "type": "FrameworkClause", "label": "Azure AI Search Security Filters", "framework": "microsoft_azure_ai" }, { "id": "clause:microsoft_azure_resil:Azure Resiliency \u2014 Availability zone design and geo-redundan", "type": "FrameworkClause", "label": "Azure Resiliency \u2014 Availability zone design and geo-redundan", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 BCDR documentation, failover test", "type": "FrameworkClause", "label": "Azure Resiliency & BCDR \u2014 BCDR documentation, failover test", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 design guidance for regulated work", "type": "FrameworkClause", "label": "Azure Resiliency & BCDR \u2014 design guidance for regulated work", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Design lifecycle integration: BCDR", "type": "FrameworkClause", "label": "Azure Resiliency & BCDR \u2014 Design lifecycle integration: BCDR", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Geo-redundant storage design, Azur", "type": "FrameworkClause", "label": "Azure Resiliency & BCDR \u2014 Geo-redundant storage design, Azur", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 infrastructure-as-code recovery (A", "type": "FrameworkClause", "label": "Azure Resiliency & BCDR \u2014 infrastructure-as-code recovery (A", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR \u2013 Chaos testing and resilience validation (Azure Chaos", "type": "FrameworkClause", "label": "BCDR \u2013 Chaos testing and resilience validation (Azure Chaos", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR \u2013 Graceful degradation design and availability zone fai", "type": "FrameworkClause", "label": "BCDR \u2013 Graceful degradation design and availability zone fai", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR \u2013 Post-incident review and recovery objective validatio", "type": "FrameworkClause", "label": "BCDR \u2013 Post-incident review and recovery objective validatio", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR \u2013 Recovery objectives (RTO/RPO) definition and validati", "type": "FrameworkClause", "label": "BCDR \u2013 Recovery objectives (RTO/RPO) definition and validati", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR \u2013 Testing and validation of failover and recovery contr", "type": "FrameworkClause", "label": "BCDR \u2013 Testing and validation of failover and recovery contr", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR \u2013 Third-party service dependency continuity planning", "type": "FrameworkClause", "label": "BCDR \u2013 Third-party service dependency continuity planning", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR \u2014 Data backup, geo-redundant recovery, and RPO verifica", "type": "FrameworkClause", "label": "BCDR \u2014 Data backup, geo-redundant recovery, and RPO verifica", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR \u2014 Failover configuration and availability zone design", "type": "FrameworkClause", "label": "BCDR \u2014 Failover configuration and availability zone design", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR design guidance", "type": "FrameworkClause", "label": "BCDR design guidance", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Business continuity planning methodol", "type": "FrameworkClause", "label": "BCDR design guidance \u2014 Business continuity planning methodol", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Deployment rollback and blue-green re", "type": "FrameworkClause", "label": "BCDR design guidance \u2014 Deployment rollback and blue-green re", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Geo-redundancy and failover configura", "type": "FrameworkClause", "label": "BCDR design guidance \u2014 Geo-redundancy and failover configura", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Post-recovery documentation and compl", "type": "FrameworkClause", "label": "BCDR design guidance \u2014 Post-recovery documentation and compl", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery documentation and activity l", "type": "FrameworkClause", "label": "BCDR design guidance \u2014 Recovery documentation and activity l", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery objectives and failover conf", "type": "FrameworkClause", "label": "BCDR design guidance \u2014 Recovery objectives and failover conf", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Testing and validation program", "type": "FrameworkClause", "label": "BCDR design guidance \u2014 Testing and validation program", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:BCDR documentation: fault tolerance evidence", "type": "FrameworkClause", "label": "BCDR documentation: fault tolerance evidence", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Bulkhead pattern", "type": "FrameworkClause", "label": "Bulkhead pattern", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Business continuity planning", "type": "FrameworkClause", "label": "Business continuity planning", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Business continuity planning \u2013 BCDR evidence documentation a", "type": "FrameworkClause", "label": "Business continuity planning \u2013 BCDR evidence documentation a", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Business continuity planning \u2014 Communication procedures and", "type": "FrameworkClause", "label": "Business continuity planning \u2014 Communication procedures and", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Circuit Breaker Pattern \u2014 Azure Architecture Center", "type": "FrameworkClause", "label": "Circuit Breaker Pattern \u2014 Azure Architecture Center", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Durable Functions checkpoint", "type": "FrameworkClause", "label": "Durable Functions checkpoint", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Failover configuration \u2014 Blue/green deployment and deploymen", "type": "FrameworkClause", "label": "Failover configuration \u2014 Blue/green deployment and deploymen", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Failover configuration \u2014 Return-to-service validation and pr", "type": "FrameworkClause", "label": "Failover configuration \u2014 Return-to-service validation and pr", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Failover configuration and recovery objectives", "type": "FrameworkClause", "label": "Failover configuration and recovery objectives", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:RE:05", "type": "FrameworkClause", "label": "05", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:RE:09", "type": "FrameworkClause", "label": "09", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Recovery objectives \u2014 BCDR design guidance", "type": "FrameworkClause", "label": "Recovery objectives \u2014 BCDR design guidance", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Recovery objectives \u2014 Business continuity tiering by service", "type": "FrameworkClause", "label": "Recovery objectives \u2014 Business continuity tiering by service", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_azure_resil:Recovery objectives \u2014 RTO/RPO measurement and BCDR complianc", "type": "FrameworkClause", "label": "Recovery objectives \u2014 RTO/RPO measurement and BCDR complianc", "framework": "microsoft_azure_resil" }, { "id": "clause:microsoft_compliance:Assessment template", "type": "FrameworkClause", "label": "Assessment template", "framework": "microsoft_compliance" }, { "id": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "FrameworkClause", "label": "Assessment template \u2014 EU AI Act", "framework": "microsoft_compliance" }, { "id": "clause:microsoft_compliance:Compliance Manager platform", "type": "FrameworkClause", "label": "Compliance Manager platform", "framework": "microsoft_compliance" }, { "id": "clause:microsoft_compliance:Compliance score", "type": "FrameworkClause", "label": "Compliance score", "framework": "microsoft_compliance" }, { "id": "clause:microsoft_compliance:Compliance Score", "type": "FrameworkClause", "label": "Compliance Score", "framework": "microsoft_compliance" }, { "id": "clause:microsoft_compliance:Compliance score monitoring", "type": "FrameworkClause", "label": "Compliance score monitoring", "framework": "microsoft_compliance" }, { "id": "clause:microsoft_compliance:Control mapping", "type": "FrameworkClause", "label": "Control mapping", "framework": "microsoft_compliance" }, { "id": "clause:microsoft_compliance:FedRAMP High & DoD IL5", "type": "FrameworkClause", "label": "FedRAMP High & DoD IL5", "framework": "microsoft_compliance" }, { "id": "clause:microsoft_compliance:Improvement Action", "type": "FrameworkClause", "label": "Improvement Action", "framework": "microsoft_compliance" }, { "id": "clause:microsoft_compliance:Improvement actions", "type": "FrameworkClause", "label": "Improvement actions", "framework": "microsoft_compliance" }, { "id": "clause:microsoft_compliance:Improvement Actions", "type": "FrameworkClause", "label": "Improvement Actions", "framework": "microsoft_compliance" }, { "id": "clause:microsoft_compliance:ISO 42001 assessment", "type": "FrameworkClause", "label": "ISO 42001 assessment", "framework": "microsoft_compliance" }, { "id": "clause:microsoft_purview:Data Catalog \u2014 Data Lineage", "type": "FrameworkClause", "label": "Data Catalog \u2014 Data Lineage", "framework": "microsoft_purview" }, { "id": "clause:microsoft_purview:Data Estate Insights", "type": "FrameworkClause", "label": "Data Estate Insights", "framework": "microsoft_purview" }, { "id": "clause:microsoft_purview:Data Health Management", "type": "FrameworkClause", "label": "Data Health Management", "framework": "microsoft_purview" }, { "id": "clause:microsoft_purview:Data lineage (lineage extraction)", "type": "FrameworkClause", "label": "Data lineage (lineage extraction)", "framework": "microsoft_purview" }, { "id": "clause:microsoft_purview:Data Map", "type": "FrameworkClause", "label": "Data Map", "framework": "microsoft_purview" }, { "id": "clause:microsoft_purview:Data Quality (data type and format rules)", "type": "FrameworkClause", "label": "Data Quality (data type and format rules)", "framework": "microsoft_purview" }, { "id": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "type": "FrameworkClause", "label": "Information Protection \u2014 sensitivity labels", "framework": "microsoft_purview" }, { "id": "clause:microsoft_purview:Microsoft 365 Advanced Data Residency", "type": "FrameworkClause", "label": "Microsoft 365 Advanced Data Residency", "framework": "microsoft_purview" }, { "id": "clause:microsoft_purview:Microsoft platform encryption in transit (TLS)", "type": "FrameworkClause", "label": "Microsoft platform encryption in transit (TLS)", "framework": "microsoft_purview" }, { "id": "clause:microsoft_purview:Microsoft Purview \u2014 Sensitive Information Types and DLP", "type": "FrameworkClause", "label": "Microsoft Purview \u2014 Sensitive Information Types and DLP", "framework": "microsoft_purview" }, { "id": "clause:microsoft_purview:Purview Audit (unified audit log)", "type": "FrameworkClause", "label": "Purview Audit (unified audit log)", "framework": "microsoft_purview" }, { "id": "clause:microsoft_purview:Purview Compliance Manager", "type": "FrameworkClause", "label": "Purview Compliance Manager", "framework": "microsoft_purview" }, { "id": "clause:microsoft_purview:Purview Insider Risk Management", "type": "FrameworkClause", "label": "Purview Insider Risk Management", "framework": "microsoft_purview" }, { "id": "clause:microsoft_rai:A1", "type": "FrameworkClause", "label": "A1", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:A2", "type": "FrameworkClause", "label": "A2", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:A3", "type": "FrameworkClause", "label": "A3", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:A5", "type": "FrameworkClause", "label": "A5", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure AI certifications \u2014 ISO 27001, SOC 2, ISO 42001", "type": "FrameworkClause", "label": "Azure AI certifications \u2014 ISO 27001, SOC 2, ISO 42001", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure AI compliance certifications \u2014 ISO 27001, SOC 2, ISO 4", "type": "FrameworkClause", "label": "Azure AI compliance certifications \u2014 ISO 27001, SOC 2, ISO 4", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure AI Foundry Observability \u2014 Operating Intent Drift Moni", "type": "FrameworkClause", "label": "Azure AI Foundry Observability \u2014 Operating Intent Drift Moni", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure DevOps Required Reviewers \u2014 Multi-Party AI Deployment", "type": "FrameworkClause", "label": "Azure DevOps Required Reviewers \u2014 Multi-Party AI Deployment", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure encryption \u2014 at rest and in transit", "type": "FrameworkClause", "label": "Azure encryption \u2014 at rest and in transit", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure Event Grid \u2014 AI Governance Policy Change Alerts", "type": "FrameworkClause", "label": "Azure Event Grid \u2014 AI Governance Policy Change Alerts", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure Machine Learning \u2014 Model and Data Version Tracking", "type": "FrameworkClause", "label": "Azure Machine Learning \u2014 Model and Data Version Tracking", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure Machine Learning Model Monitoring \u2014 Knowledge Source S", "type": "FrameworkClause", "label": "Azure Machine Learning Model Monitoring \u2014 Knowledge Source S", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure PIM Emergency Access \u2014 Governed Break-Glass Activation", "type": "FrameworkClause", "label": "Azure PIM Emergency Access \u2014 Governed Break-Glass Activation", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure Policy \u2014 AI Model Deployment Restriction and Content S", "type": "FrameworkClause", "label": "Azure Policy \u2014 AI Model Deployment Restriction and Content S", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure Policy \u2014 AI Resource Provisioning Commitment Approval", "type": "FrameworkClause", "label": "Azure Policy \u2014 AI Resource Provisioning Commitment Approval", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure Policy + Microsoft Purview Data Governance \u2014 Automated", "type": "FrameworkClause", "label": "Azure Policy + Microsoft Purview Data Governance \u2014 Automated", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure Policy Compliance Dashboard \u2014 AI Workload Policy Adher", "type": "FrameworkClause", "label": "Azure Policy Compliance Dashboard \u2014 AI Workload Policy Adher", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure Policy Custom Definitions \u2014 AI Action Approval Thresho", "type": "FrameworkClause", "label": "Azure Policy Custom Definitions \u2014 AI Action Approval Thresho", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure Policy Initiative Assignments \u2014 AI Policy Register Imp", "type": "FrameworkClause", "label": "Azure Policy Initiative Assignments \u2014 AI Policy Register Imp", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure RBAC \u2014 Authority Delegation Hierarchy", "type": "FrameworkClause", "label": "Azure RBAC \u2014 Authority Delegation Hierarchy", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure Resource Manager Policy Versioning \u2014 Automated Policy", "type": "FrameworkClause", "label": "Azure Resource Manager Policy Versioning \u2014 Automated Policy", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Azure SLA + Azure Monitor \u2014 SLA Commitment Monitoring", "type": "FrameworkClause", "label": "Azure SLA + Azure Monitor \u2014 SLA Commitment Monitoring", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:F1", "type": "FrameworkClause", "label": "F1", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:F2", "type": "FrameworkClause", "label": "F2", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:F3", "type": "FrameworkClause", "label": "F3", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:I1", "type": "FrameworkClause", "label": "I1", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft data transfer documentation \u2014 customer TIA support", "type": "FrameworkClause", "label": "Microsoft data transfer documentation \u2014 customer TIA support", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Defender for Cloud \u2014 AI Workload Posture and Threa", "type": "FrameworkClause", "label": "Microsoft Defender for Cloud \u2014 AI Workload Posture and Threa", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Defender for Cloud + Purview \u2014 Cross-Domain Policy", "type": "FrameworkClause", "label": "Microsoft Defender for Cloud + Purview \u2014 Cross-Domain Policy", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft EU Data Boundary and Jurisdiction-Specific DPAs", "type": "FrameworkClause", "label": "Microsoft EU Data Boundary and Jurisdiction-Specific DPAs", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft EU Data Boundary Commitment", "type": "FrameworkClause", "label": "Microsoft EU Data Boundary Commitment", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Privacy Report \u2014 periodic privacy governance discl", "type": "FrameworkClause", "label": "Microsoft Privacy Report \u2014 periodic privacy governance discl", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Product Terms and Data Processing Agreement", "type": "FrameworkClause", "label": "Microsoft Product Terms and Data Processing Agreement", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Products and Services DPA \u2014 security incident noti", "type": "FrameworkClause", "label": "Microsoft Products and Services DPA \u2014 security incident noti", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview \u2014 Data Governance for AI Knowledge Sources", "type": "FrameworkClause", "label": "Microsoft Purview \u2014 Data Governance for AI Knowledge Sources", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview + Azure Policy Compliance Reports \u2014 AI Gov", "type": "FrameworkClause", "label": "Microsoft Purview + Azure Policy Compliance Reports \u2014 AI Gov", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Contract Obligation Audit Trail Re", "type": "FrameworkClause", "label": "Microsoft Purview Audit \u2014 Contract Obligation Audit Trail Re", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Principal Accountability for AI Ac", "type": "FrameworkClause", "label": "Microsoft Purview Audit \u2014 Principal Accountability for AI Ac", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Unified AI Authorization Audit Tra", "type": "FrameworkClause", "label": "Microsoft Purview Audit \u2014 Unified AI Authorization Audit Tra", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 compliance score and", "type": "FrameworkClause", "label": "Microsoft Purview Compliance Manager \u2014 compliance score and", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 control evidence coll", "type": "FrameworkClause", "label": "Microsoft Purview Compliance Manager \u2014 control evidence coll", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Custom Assessments fo", "type": "FrameworkClause", "label": "Microsoft Purview Compliance Manager \u2014 Custom Assessments fo", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence archive", "type": "FrameworkClause", "label": "Microsoft Purview Compliance Manager \u2014 evidence archive", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence collection a", "type": "FrameworkClause", "label": "Microsoft Purview Compliance Manager \u2014 evidence collection a", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 regulatory assessment", "type": "FrameworkClause", "label": "Microsoft Purview Compliance Manager \u2014 regulatory assessment", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Regulatory Template C", "type": "FrameworkClause", "label": "Microsoft Purview Compliance Manager \u2014 Regulatory Template C", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Structured Internal A", "type": "FrameworkClause", "label": "Microsoft Purview Compliance Manager \u2014 Structured Internal A", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Compliance Solutions \u2014 Contractual Conflic", "type": "FrameworkClause", "label": "Microsoft Purview Compliance Solutions \u2014 Contractual Conflic", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Data Lifecycle Management", "type": "FrameworkClause", "label": "Microsoft Purview Data Lifecycle Management", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Data Loss Prevention \u2014 generative AI app c", "type": "FrameworkClause", "label": "Microsoft Purview Data Loss Prevention \u2014 generative AI app c", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Data Map", "type": "FrameworkClause", "label": "Microsoft Purview Data Map", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Data Map \u2014 lineage tracking", "type": "FrameworkClause", "label": "Microsoft Purview Data Map \u2014 lineage tracking", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction data governan", "type": "FrameworkClause", "label": "Microsoft Purview DSPM for AI \u2014 AI interaction data governan", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "type": "FrameworkClause", "label": "Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Information Protection \u2014 classification an", "type": "FrameworkClause", "label": "Microsoft Purview Information Protection \u2014 classification an", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Information Protection Classification", "type": "FrameworkClause", "label": "Microsoft Purview Information Protection Classification", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Purview Insider Risk Management \u2014 risky data-handl", "type": "FrameworkClause", "label": "Microsoft Purview Insider Risk Management \u2014 risky data-handl", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft RAI Red Team Operations \u2014 Independent Program Asse", "type": "FrameworkClause", "label": "Microsoft RAI Red Team Operations \u2014 Independent Program Asse", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft RAI Transparency Report \u2014 Board Governance Disclos", "type": "FrameworkClause", "label": "Microsoft RAI Transparency Report \u2014 Board Governance Disclos", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Responsible AI Impact Assessment template and guid", "type": "FrameworkClause", "label": "Microsoft Responsible AI Impact Assessment template and guid", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 accountability and on", "type": "FrameworkClause", "label": "Microsoft Responsible AI Standard v2 \u2014 accountability and on", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Impact Assessment req", "type": "FrameworkClause", "label": "Microsoft Responsible AI Standard v2 \u2014 Impact Assessment req", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "FrameworkClause", "label": "Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Transparency goals", "type": "FrameworkClause", "label": "Microsoft Responsible AI Standard v2 \u2014 Transparency goals", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report \u2014 Systematic Le", "type": "FrameworkClause", "label": "Microsoft Responsible AI Transparency Report \u2014 Systematic Le", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report + Purview \u2014 Dis", "type": "FrameworkClause", "label": "Microsoft Responsible AI Transparency Report + Purview \u2014 Dis", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:Microsoft Sentinel \u2014 AI Policy Incident Classification and S", "type": "FrameworkClause", "label": "Microsoft Sentinel \u2014 AI Policy Incident Classification and S", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:PS1", "type": "FrameworkClause", "label": "PS1", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:PS2", "type": "FrameworkClause", "label": "PS2", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:RS1", "type": "FrameworkClause", "label": "RS1", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:RS2", "type": "FrameworkClause", "label": "RS2", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:RS3", "type": "FrameworkClause", "label": "RS3", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:T1", "type": "FrameworkClause", "label": "T1", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:T2", "type": "FrameworkClause", "label": "T2", "framework": "microsoft_rai" }, { "id": "clause:microsoft_rai:T3", "type": "FrameworkClause", "label": "T3", "framework": "microsoft_rai" }, { "id": "clause:mitre_atlas:AML.M0004", "type": "FrameworkClause", "label": "AML.M0004", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0005", "type": "FrameworkClause", "label": "AML.M0005", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0012", "type": "FrameworkClause", "label": "AML.M0012", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0013", "type": "FrameworkClause", "label": "AML.M0013", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0014", "type": "FrameworkClause", "label": "AML.M0014", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0015", "type": "FrameworkClause", "label": "AML.M0015", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0018", "type": "FrameworkClause", "label": "AML.M0018", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0020", "type": "FrameworkClause", "label": "AML.M0020", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0024", "type": "FrameworkClause", "label": "AML.M0024", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0026", "type": "FrameworkClause", "label": "AML.M0026", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0027", "type": "FrameworkClause", "label": "AML.M0027", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0028", "type": "FrameworkClause", "label": "AML.M0028", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0029", "type": "FrameworkClause", "label": "AML.M0029", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0030", "type": "FrameworkClause", "label": "AML.M0030", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0031", "type": "FrameworkClause", "label": "AML.M0031", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0032", "type": "FrameworkClause", "label": "AML.M0032", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.M0033", "type": "FrameworkClause", "label": "AML.M0033", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0010", "type": "FrameworkClause", "label": "AML.T0010", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0012", "type": "FrameworkClause", "label": "AML.T0012", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0018", "type": "FrameworkClause", "label": "AML.T0018", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0024", "type": "FrameworkClause", "label": "AML.T0024", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0025", "type": "FrameworkClause", "label": "AML.T0025", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0034.002", "type": "FrameworkClause", "label": "AML.T0034.002", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0040", "type": "FrameworkClause", "label": "AML.T0040", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0051", "type": "FrameworkClause", "label": "AML.T0051", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0053", "type": "FrameworkClause", "label": "AML.T0053", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0056", "type": "FrameworkClause", "label": "AML.T0056", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0057", "type": "FrameworkClause", "label": "AML.T0057", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0066", "type": "FrameworkClause", "label": "AML.T0066", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0070", "type": "FrameworkClause", "label": "AML.T0070", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0080", "type": "FrameworkClause", "label": "AML.T0080", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0081", "type": "FrameworkClause", "label": "AML.T0081", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0086", "type": "FrameworkClause", "label": "AML.T0086", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0098", "type": "FrameworkClause", "label": "AML.T0098", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0099", "type": "FrameworkClause", "label": "AML.T0099", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0100", "type": "FrameworkClause", "label": "AML.T0100", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0101", "type": "FrameworkClause", "label": "AML.T0101", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0104", "type": "FrameworkClause", "label": "AML.T0104", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:AML.T0105", "type": "FrameworkClause", "label": "AML.T0105", "framework": "mitre_atlas" }, { "id": "clause:mitre_atlas:ATLAS tactics and techniques (framework-wide)", "type": "FrameworkClause", "label": "ATLAS tactics and techniques (framework-wide)", "framework": "mitre_atlas" }, { "id": "clause:mitre:AML.M0000", "type": "FrameworkClause", "label": "AML.M0000", "framework": "mitre" }, { "id": "clause:mitre:AML.M0001", "type": "FrameworkClause", "label": "AML.M0001", "framework": "mitre" }, { "id": "clause:mitre:AML.M0002", "type": "FrameworkClause", "label": "AML.M0002", "framework": "mitre" }, { "id": "clause:mitre:AML.M0004", "type": "FrameworkClause", "label": "AML.M0004", "framework": "mitre" }, { "id": "clause:mitre:AML.M0007", "type": "FrameworkClause", "label": "AML.M0007", "framework": "mitre" }, { "id": "clause:mitre:AML.M0008", "type": "FrameworkClause", "label": "AML.M0008", "framework": "mitre" }, { "id": "clause:mitre:AML.M0009", "type": "FrameworkClause", "label": "AML.M0009", "framework": "mitre" }, { "id": "clause:mitre:AML.M0010", "type": "FrameworkClause", "label": "AML.M0010", "framework": "mitre" }, { "id": "clause:mitre:AML.M0014", "type": "FrameworkClause", "label": "AML.M0014", "framework": "mitre" }, { "id": "clause:mitre:AML.M0015", "type": "FrameworkClause", "label": "AML.M0015", "framework": "mitre" }, { "id": "clause:mitre:AML.M0018", "type": "FrameworkClause", "label": "AML.M0018", "framework": "mitre" }, { "id": "clause:mitre:AML.M0019", "type": "FrameworkClause", "label": "AML.M0019", "framework": "mitre" }, { "id": "clause:mitre:AML.M0020", "type": "FrameworkClause", "label": "AML.M0020", "framework": "mitre" }, { "id": "clause:mitre:AML.M0021", "type": "FrameworkClause", "label": "AML.M0021", "framework": "mitre" }, { "id": "clause:mitre:AML.M0022", "type": "FrameworkClause", "label": "AML.M0022", "framework": "mitre" }, { "id": "clause:mitre:AML.M0023", "type": "FrameworkClause", "label": "AML.M0023", "framework": "mitre" }, { "id": "clause:mitre:AML.M0024", "type": "FrameworkClause", "label": "AML.M0024", "framework": "mitre" }, { "id": "clause:mitre:AML.M0026", "type": "FrameworkClause", "label": "AML.M0026", "framework": "mitre" }, { "id": "clause:mitre:AML.M0027", "type": "FrameworkClause", "label": "AML.M0027", "framework": "mitre" }, { "id": "clause:mitre:AML.M0028", "type": "FrameworkClause", "label": "AML.M0028", "framework": "mitre" }, { "id": "clause:mitre:AML.M0029", "type": "FrameworkClause", "label": "AML.M0029", "framework": "mitre" }, { "id": "clause:mitre:AML.M0030", "type": "FrameworkClause", "label": "AML.M0030", "framework": "mitre" }, { "id": "clause:mitre:AML.T0010", "type": "FrameworkClause", "label": "AML.T0010", "framework": "mitre" }, { "id": "clause:mitre:AML.T0018", "type": "FrameworkClause", "label": "AML.T0018", "framework": "mitre" }, { "id": "clause:mitre:AML.T0020", "type": "FrameworkClause", "label": "AML.T0020", "framework": "mitre" }, { "id": "clause:mitre:AML.T0024", "type": "FrameworkClause", "label": "AML.T0024", "framework": "mitre" }, { "id": "clause:mitre:AML.T0043", "type": "FrameworkClause", "label": "AML.T0043", "framework": "mitre" }, { "id": "clause:mitre:AML.T0044", "type": "FrameworkClause", "label": "AML.T0044", "framework": "mitre" }, { "id": "clause:mitre:AML.T0051", "type": "FrameworkClause", "label": "AML.T0051", "framework": "mitre" }, { "id": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "type": "FrameworkClause", "label": "Check before acting \u2014 policy engine inspects labels before e", "framework": "ms_ifc_agents" }, { "id": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "type": "FrameworkClause", "label": "Check before acting \u2014 policy engine may block an action or a", "framework": "ms_ifc_agents" }, { "id": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "FrameworkClause", "label": "Confidentiality label (public/confidential/read-access list)", "framework": "ms_ifc_agents" }, { "id": "clause:ms_ifc_agents:Confidentiality label read-access list ({Alice, Bob, Charlie", "type": "FrameworkClause", "label": "Confidentiality label read-access list ({Alice, Bob, Charlie", "framework": "ms_ifc_agents" }, { "id": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "type": "FrameworkClause", "label": "Information-flow control \u2014 Check before acting: a policy eng", "framework": "ms_ifc_agents" }, { "id": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "FrameworkClause", "label": "Information-flow control as a deterministic defense against", "framework": "ms_ifc_agents" }, { "id": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "type": "FrameworkClause", "label": "Information-flow control as deterministic defense against pr", "framework": "ms_ifc_agents" }, { "id": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "FrameworkClause", "label": "Integrating IFC into agentic orchestrators and tools \u2014 Commu", "framework": "ms_ifc_agents" }, { "id": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "type": "FrameworkClause", "label": "Integrity label (trusted/untrusted) on ingested and tool-ret", "framework": "ms_ifc_agents" }, { "id": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "FrameworkClause", "label": "Integrity label (trusted/untrusted) on retrieved content; Du", "framework": "ms_ifc_agents" }, { "id": "clause:ms_ifc_agents:Propagate labels \u2014 labels travel with derivative results as", "type": "FrameworkClause", "label": "Propagate labels \u2014 labels travel with derivative results as", "framework": "ms_ifc_agents" }, { "id": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "type": "FrameworkClause", "label": "deployment.release-ai-responsibly", "framework": "ncsc_cisa_secure_ai_2023" }, { "id": "clause:nis2:21", "type": "FrameworkClause", "label": "21", "framework": "nis2" }, { "id": "clause:nist_800_160_v2:\u00a72.1.1", "type": "FrameworkClause", "label": "\u00a72.1.1", "framework": "nist_800_160_v2" }, { "id": "clause:nist_800_160_v2:\u00a72.1.2", "type": "FrameworkClause", "label": "\u00a72.1.2", "framework": "nist_800_160_v2" }, { "id": "clause:nist_800_160_v2:\u00a72.1.3", "type": "FrameworkClause", "label": "\u00a72.1.3", "framework": "nist_800_160_v2" }, { "id": "clause:nist_800_160_v2:\u00a72.2", "type": "FrameworkClause", "label": "\u00a72.2", "framework": "nist_800_160_v2" }, { "id": "clause:nist_800_160_v2:\u00a73.2", "type": "FrameworkClause", "label": "\u00a73.2", "framework": "nist_800_160_v2" }, { "id": "clause:nist_800_160_v2:Appendix D", "type": "FrameworkClause", "label": "Appendix D", "framework": "nist_800_160_v2" }, { "id": "clause:nist_800_53:AC-23", "type": "FrameworkClause", "label": "AC-23", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:AC-5", "type": "FrameworkClause", "label": "AC-5", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:AU-11", "type": "FrameworkClause", "label": "AU-11", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:AU-12", "type": "FrameworkClause", "label": "AU-12", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:AU-6", "type": "FrameworkClause", "label": "AU-6", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:CA-2", "type": "FrameworkClause", "label": "CA-2", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:CA-7", "type": "FrameworkClause", "label": "CA-7", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:CM-3", "type": "FrameworkClause", "label": "CM-3", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:IR-4", "type": "FrameworkClause", "label": "IR-4", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:PL-1", "type": "FrameworkClause", "label": "PL-1", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:RA-5", "type": "FrameworkClause", "label": "RA-5", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:SA-4", "type": "FrameworkClause", "label": "SA-4", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:SA-9", "type": "FrameworkClause", "label": "SA-9", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:SI-2", "type": "FrameworkClause", "label": "SI-2", "framework": "nist_800_53" }, { "id": "clause:nist_800_53:SI-7", "type": "FrameworkClause", "label": "SI-7", "framework": "nist_800_53" }, { "id": "clause:nist_800_63:SP 800-63-4", "type": "FrameworkClause", "label": "SP 800-63-4", "framework": "nist_800_63" }, { "id": "clause:nist_800_63:SP 800-63-4 \u00a73", "type": "FrameworkClause", "label": "SP 800-63-4 \u00a73", "framework": "nist_800_63" }, { "id": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "type": "FrameworkClause", "label": "SP 800-63-4 \u00a73.3.2", "framework": "nist_800_63" }, { "id": "clause:nist_800_63:SP 800-63-4 \u00a73.4.4", "type": "FrameworkClause", "label": "SP 800-63-4 \u00a73.4.4", "framework": "nist_800_63" }, { "id": "clause:nist_800_63:SP 800-63A-4", "type": "FrameworkClause", "label": "SP 800-63A-4", "framework": "nist_800_63" }, { "id": "clause:nist_800_63:SP 800-63B-4", "type": "FrameworkClause", "label": "SP 800-63B-4", "framework": "nist_800_63" }, { "id": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "FrameworkClause", "label": "SP 800-63B-4 \u00a73", "framework": "nist_800_63" }, { "id": "clause:nist_800_63:SP 800-63B-4 \u00a73.1.7", "type": "FrameworkClause", "label": "SP 800-63B-4 \u00a73.1.7", "framework": "nist_800_63" }, { "id": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "FrameworkClause", "label": "SP 800-63B-4 \u00a74", "framework": "nist_800_63" }, { "id": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "FrameworkClause", "label": "SP 800-63C-4 \u00a72", "framework": "nist_800_63" }, { "id": "clause:nist_800_63:SP 800-63C-4 \u00a73.15", "type": "FrameworkClause", "label": "SP 800-63C-4 \u00a73.15", "framework": "nist_800_63" }, { "id": "clause:nist_800_63:SP 800-63C-4 \u00a73.5", "type": "FrameworkClause", "label": "SP 800-63C-4 \u00a73.5", "framework": "nist_800_63" }, { "id": "clause:nist_ai_100_2:NISTAML.012", "type": "FrameworkClause", "label": "NISTAML.012", "framework": "nist_ai_100_2" }, { "id": "clause:nist_ai_100_2:NISTAML.013", "type": "FrameworkClause", "label": "NISTAML.013", "framework": "nist_ai_100_2" }, { "id": "clause:nist_ai_100_2:NISTAML.021", "type": "FrameworkClause", "label": "NISTAML.021", "framework": "nist_ai_100_2" }, { "id": "clause:nist_ai_100_2:NISTAML.022", "type": "FrameworkClause", "label": "NISTAML.022", "framework": "nist_ai_100_2" }, { "id": "clause:nist_ai_100_2:NISTAML.023", "type": "FrameworkClause", "label": "NISTAML.023", "framework": "nist_ai_100_2" }, { "id": "clause:nist_ai_100_2:NISTAML.032", "type": "FrameworkClause", "label": "NISTAML.032", "framework": "nist_ai_100_2" }, { "id": "clause:nist_ai_100_2:NISTAML.037", "type": "FrameworkClause", "label": "NISTAML.037", "framework": "nist_ai_100_2" }, { "id": "clause:nist_ai_100_2:NISTAML.038", "type": "FrameworkClause", "label": "NISTAML.038", "framework": "nist_ai_100_2" }, { "id": "clause:nist_ai_100_2:NISTAML.05", "type": "FrameworkClause", "label": "NISTAML.05", "framework": "nist_ai_100_2" }, { "id": "clause:nist_ai_600_1:2.4", "type": "FrameworkClause", "label": "2.4", "framework": "nist_ai_600_1" }, { "id": "clause:nist_ai_600_1:2.8", "type": "FrameworkClause", "label": "2.8", "framework": "nist_ai_600_1" }, { "id": "clause:nist_ai_600_1:2.9", "type": "FrameworkClause", "label": "2.9", "framework": "nist_ai_600_1" }, { "id": "clause:nist_ai_600_1:CBRN", "type": "FrameworkClause", "label": "CBRN", "framework": "nist_ai_600_1" }, { "id": "clause:nist_ai_600_1:CONFABULATION", "type": "FrameworkClause", "label": "CONFABULATION", "framework": "nist_ai_600_1" }, { "id": "clause:nist_ai_600_1:DATA-PRIVACY", "type": "FrameworkClause", "label": "DATA-PRIVACY", "framework": "nist_ai_600_1" }, { "id": "clause:nist_ai_600_1:HUMAN-AI-CONFIG", "type": "FrameworkClause", "label": "HUMAN-AI-CONFIG", "framework": "nist_ai_600_1" }, { "id": "clause:nist_ai_600_1:INFO-INTEGRITY", "type": "FrameworkClause", "label": "INFO-INTEGRITY", "framework": "nist_ai_600_1" }, { "id": "clause:nist_ai_600_1:INFO-SECURITY", "type": "FrameworkClause", "label": "INFO-SECURITY", "framework": "nist_ai_600_1" }, { "id": "clause:nist_ai_600_1:MS-2.5", "type": "FrameworkClause", "label": "MS-2.5", "framework": "nist_ai_600_1" }, { "id": "clause:nist_csf:DE.CM-01", "type": "FrameworkClause", "label": "DE.CM-01", "framework": "nist_csf" }, { "id": "clause:nist_csf:DE.CM-09", "type": "FrameworkClause", "label": "DE.CM-09", "framework": "nist_csf" }, { "id": "clause:nist_csf:GV.OC-01", "type": "FrameworkClause", "label": "GV.OC-01", "framework": "nist_csf" }, { "id": "clause:nist_csf:GV.OC-03", "type": "FrameworkClause", "label": "GV.OC-03", "framework": "nist_csf" }, { "id": "clause:nist_csf:GV.OC-04", "type": "FrameworkClause", "label": "GV.OC-04", "framework": "nist_csf" }, { "id": "clause:nist_csf:GV.OV-01", "type": "FrameworkClause", "label": "GV.OV-01", "framework": "nist_csf" }, { "id": "clause:nist_csf:GV.OV-03", "type": "FrameworkClause", "label": "GV.OV-03", "framework": "nist_csf" }, { "id": "clause:nist_csf:GV.PO", "type": "FrameworkClause", "label": "GV.PO", "framework": "nist_csf" }, { "id": "clause:nist_csf:GV.PO-01", "type": "FrameworkClause", "label": "GV.PO-01", "framework": "nist_csf" }, { "id": "clause:nist_csf:GV.RR", "type": "FrameworkClause", "label": "GV.RR", "framework": "nist_csf" }, { "id": "clause:nist_csf:GV.RR-02", "type": "FrameworkClause", "label": "GV.RR-02", "framework": "nist_csf" }, { "id": "clause:nist_csf:GV.SC-07", "type": "FrameworkClause", "label": "GV.SC-07", "framework": "nist_csf" }, { "id": "clause:nist_csf:ID.AM-01", "type": "FrameworkClause", "label": "ID.AM-01", "framework": "nist_csf" }, { "id": "clause:nist_csf:ID.AM-05", "type": "FrameworkClause", "label": "ID.AM-05", "framework": "nist_csf" }, { "id": "clause:nist_csf:ID.IM-02", "type": "FrameworkClause", "label": "ID.IM-02", "framework": "nist_csf" }, { "id": "clause:nist_csf:ID.IM-03", "type": "FrameworkClause", "label": "ID.IM-03", "framework": "nist_csf" }, { "id": "clause:nist_csf:ID.IM-04", "type": "FrameworkClause", "label": "ID.IM-04", "framework": "nist_csf" }, { "id": "clause:nist_csf:ID.RA-01", "type": "FrameworkClause", "label": "ID.RA-01", "framework": "nist_csf" }, { "id": "clause:nist_csf:ID.RA-06", "type": "FrameworkClause", "label": "ID.RA-06", "framework": "nist_csf" }, { "id": "clause:nist_csf:PR.DS-01", "type": "FrameworkClause", "label": "PR.DS-01", "framework": "nist_csf" }, { "id": "clause:nist_csf:PR.IR-04", "type": "FrameworkClause", "label": "PR.IR-04", "framework": "nist_csf" }, { "id": "clause:nist_csf:RC.RP", "type": "FrameworkClause", "label": "RC.RP", "framework": "nist_csf" }, { "id": "clause:nist_csf:RC.RP-01", "type": "FrameworkClause", "label": "RC.RP-01", "framework": "nist_csf" }, { "id": "clause:nist_csf:RC.RP-02", "type": "FrameworkClause", "label": "RC.RP-02", "framework": "nist_csf" }, { "id": "clause:nist_csf:RC.RP-03", "type": "FrameworkClause", "label": "RC.RP-03", "framework": "nist_csf" }, { "id": "clause:nist_csf:RC.RP-05", "type": "FrameworkClause", "label": "RC.RP-05", "framework": "nist_csf" }, { "id": "clause:nist_csf:RS.AN", "type": "FrameworkClause", "label": "RS.AN", "framework": "nist_csf" }, { "id": "clause:nist_csf:RS.CO", "type": "FrameworkClause", "label": "RS.CO", "framework": "nist_csf" }, { "id": "clause:nist_csf:RS.MI", "type": "FrameworkClause", "label": "RS.MI", "framework": "nist_csf" }, { "id": "clause:nist_pf:CT.DM-P4", "type": "FrameworkClause", "label": "CT.DM-P4", "framework": "nist_pf" }, { "id": "clause:nist_pf:CT.DM-P6", "type": "FrameworkClause", "label": "CT.DM-P6", "framework": "nist_pf" }, { "id": "clause:nist_pf:CT.DM-P7", "type": "FrameworkClause", "label": "CT.DM-P7", "framework": "nist_pf" }, { "id": "clause:nist_pf:CT.DM-P8", "type": "FrameworkClause", "label": "CT.DM-P8", "framework": "nist_pf" }, { "id": "clause:nist_pf:CT.DP-P1", "type": "FrameworkClause", "label": "CT.DP-P1", "framework": "nist_pf" }, { "id": "clause:nist_pf:CT.DP-P2", "type": "FrameworkClause", "label": "CT.DP-P2", "framework": "nist_pf" }, { "id": "clause:nist_pf:CT.DP-P3", "type": "FrameworkClause", "label": "CT.DP-P3", "framework": "nist_pf" }, { "id": "clause:nist_pf:CT.PO-P1", "type": "FrameworkClause", "label": "CT.PO-P1", "framework": "nist_pf" }, { "id": "clause:nist_pf:CT.PO-P2", "type": "FrameworkClause", "label": "CT.PO-P2", "framework": "nist_pf" }, { "id": "clause:nist_pf:GV.MT-P1", "type": "FrameworkClause", "label": "GV.MT-P1", "framework": "nist_pf" }, { "id": "clause:nist_pf:GV.MT-P3", "type": "FrameworkClause", "label": "GV.MT-P3", "framework": "nist_pf" }, { "id": "clause:nist_pf:GV.PO-P1", "type": "FrameworkClause", "label": "GV.PO-P1", "framework": "nist_pf" }, { "id": "clause:nist_pf:GV.PO-P2", "type": "FrameworkClause", "label": "GV.PO-P2", "framework": "nist_pf" }, { "id": "clause:nist_pf:GV.PO-P5", "type": "FrameworkClause", "label": "GV.PO-P5", "framework": "nist_pf" }, { "id": "clause:nist_pf:ID.DE-P3", "type": "FrameworkClause", "label": "ID.DE-P3", "framework": "nist_pf" }, { "id": "clause:nist_pf:ID.DE-P5", "type": "FrameworkClause", "label": "ID.DE-P5", "framework": "nist_pf" }, { "id": "clause:nist_pf:ID.IM-P1", "type": "FrameworkClause", "label": "ID.IM-P1", "framework": "nist_pf" }, { "id": "clause:nist_pf:ID.IM-P5", "type": "FrameworkClause", "label": "ID.IM-P5", "framework": "nist_pf" }, { "id": "clause:nist_pf:ID.IM-P6", "type": "FrameworkClause", "label": "ID.IM-P6", "framework": "nist_pf" }, { "id": "clause:nist_pf:ID.IM-P8", "type": "FrameworkClause", "label": "ID.IM-P8", "framework": "nist_pf" }, { "id": "clause:nist_pf:PR.AC-P4", "type": "FrameworkClause", "label": "PR.AC-P4", "framework": "nist_pf" }, { "id": "clause:nist_pf:PR.AC-P6", "type": "FrameworkClause", "label": "PR.AC-P6", "framework": "nist_pf" }, { "id": "clause:nist_pf:PR.DS-P1", "type": "FrameworkClause", "label": "PR.DS-P1", "framework": "nist_pf" }, { "id": "clause:nist_pf:PR.DS-P2", "type": "FrameworkClause", "label": "PR.DS-P2", "framework": "nist_pf" }, { "id": "clause:nist_pf:PR.DS-P5", "type": "FrameworkClause", "label": "PR.DS-P5", "framework": "nist_pf" }, { "id": "clause:nist_pf:PR.DS-P6", "type": "FrameworkClause", "label": "PR.DS-P6", "framework": "nist_pf" }, { "id": "clause:nist_rmf:\u00a73.2", "type": "FrameworkClause", "label": "\u00a73.2", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:\u00a73.4", "type": "FrameworkClause", "label": "\u00a73.4", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:AI RMF: Govern", "type": "FrameworkClause", "label": "AI RMF: Govern", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "FrameworkClause", "label": "AI RMF: Govern, Manage", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:AI RMF: Govern, Map", "type": "FrameworkClause", "label": "AI RMF: Govern, Map", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:AI RMF: Govern, Measure", "type": "FrameworkClause", "label": "AI RMF: Govern, Measure", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "type": "FrameworkClause", "label": "AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:AI RMF: Manage", "type": "FrameworkClause", "label": "AI RMF: Manage", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:AI RMF: Map", "type": "FrameworkClause", "label": "AI RMF: Map", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:AI RMF: Map, Manage", "type": "FrameworkClause", "label": "AI RMF: Map, Manage", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:AI RMF: Map, Measure", "type": "FrameworkClause", "label": "AI RMF: Map, Measure", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:AI RMF: Measure", "type": "FrameworkClause", "label": "AI RMF: Measure", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "FrameworkClause", "label": "AI RMF: Measure, Manage", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 1.1", "type": "FrameworkClause", "label": "GOVERN 1.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 1.2", "type": "FrameworkClause", "label": "GOVERN 1.2", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 1.3", "type": "FrameworkClause", "label": "GOVERN 1.3", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 1.4", "type": "FrameworkClause", "label": "GOVERN 1.4", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 1.5", "type": "FrameworkClause", "label": "GOVERN 1.5", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 1.6", "type": "FrameworkClause", "label": "GOVERN 1.6", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 1.7", "type": "FrameworkClause", "label": "GOVERN 1.7", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 2.1", "type": "FrameworkClause", "label": "GOVERN 2.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 2.2", "type": "FrameworkClause", "label": "GOVERN 2.2", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 2.3", "type": "FrameworkClause", "label": "GOVERN 2.3", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 3.2", "type": "FrameworkClause", "label": "GOVERN 3.2", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 4.1", "type": "FrameworkClause", "label": "GOVERN 4.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 4.2", "type": "FrameworkClause", "label": "GOVERN 4.2", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 4.3", "type": "FrameworkClause", "label": "GOVERN 4.3", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN 6.1", "type": "FrameworkClause", "label": "GOVERN 6.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN-1.1", "type": "FrameworkClause", "label": "GOVERN-1.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN-1.2", "type": "FrameworkClause", "label": "GOVERN-1.2", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN-1.3", "type": "FrameworkClause", "label": "GOVERN-1.3", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN-1.4", "type": "FrameworkClause", "label": "GOVERN-1.4", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN-1.7", "type": "FrameworkClause", "label": "GOVERN-1.7", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN-2.1", "type": "FrameworkClause", "label": "GOVERN-2.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN-2.3", "type": "FrameworkClause", "label": "GOVERN-2.3", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN-3.2", "type": "FrameworkClause", "label": "GOVERN-3.2", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN-4.2", "type": "FrameworkClause", "label": "GOVERN-4.2", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN-4.3", "type": "FrameworkClause", "label": "GOVERN-4.3", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:GOVERN-6.1", "type": "FrameworkClause", "label": "GOVERN-6.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MANAGE 1.2", "type": "FrameworkClause", "label": "MANAGE 1.2", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MANAGE 1.3", "type": "FrameworkClause", "label": "MANAGE 1.3", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MANAGE 2.4", "type": "FrameworkClause", "label": "MANAGE 2.4", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MANAGE 3.1", "type": "FrameworkClause", "label": "MANAGE 3.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MANAGE 4.1", "type": "FrameworkClause", "label": "MANAGE 4.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MANAGE 4.3", "type": "FrameworkClause", "label": "MANAGE 4.3", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MANAGE-1.1", "type": "FrameworkClause", "label": "MANAGE-1.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MANAGE-2.4", "type": "FrameworkClause", "label": "MANAGE-2.4", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MANAGE-4.1", "type": "FrameworkClause", "label": "MANAGE-4.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MAP 1.1", "type": "FrameworkClause", "label": "MAP 1.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MAP 1.5", "type": "FrameworkClause", "label": "MAP 1.5", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MAP 1.6", "type": "FrameworkClause", "label": "MAP 1.6", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MAP 2.2", "type": "FrameworkClause", "label": "MAP 2.2", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MAP 2.3", "type": "FrameworkClause", "label": "MAP 2.3", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MAP 5.1", "type": "FrameworkClause", "label": "MAP 5.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MAP-1.5", "type": "FrameworkClause", "label": "MAP-1.5", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MAP-2.2", "type": "FrameworkClause", "label": "MAP-2.2", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MAP-2.3", "type": "FrameworkClause", "label": "MAP-2.3", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MAP-4.2", "type": "FrameworkClause", "label": "MAP-4.2", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE 1.1", "type": "FrameworkClause", "label": "MEASURE 1.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE 2.1", "type": "FrameworkClause", "label": "MEASURE 2.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE 2.11", "type": "FrameworkClause", "label": "MEASURE 2.11", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE 2.3", "type": "FrameworkClause", "label": "MEASURE 2.3", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE 2.4", "type": "FrameworkClause", "label": "MEASURE 2.4", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE 2.5", "type": "FrameworkClause", "label": "MEASURE 2.5", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE 2.9", "type": "FrameworkClause", "label": "MEASURE 2.9", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE 3.1", "type": "FrameworkClause", "label": "MEASURE 3.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE 4.1", "type": "FrameworkClause", "label": "MEASURE 4.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE-2.1", "type": "FrameworkClause", "label": "MEASURE-2.1", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE-2.10", "type": "FrameworkClause", "label": "MEASURE-2.10", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE-2.11", "type": "FrameworkClause", "label": "MEASURE-2.11", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE-2.3", "type": "FrameworkClause", "label": "MEASURE-2.3", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE-2.4", "type": "FrameworkClause", "label": "MEASURE-2.4", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE-2.6", "type": "FrameworkClause", "label": "MEASURE-2.6", "framework": "nist_rmf" }, { "id": "clause:nist_rmf:MEASURE-2.7", "type": "FrameworkClause", "label": "MEASURE-2.7", "framework": "nist_rmf" }, { "id": "clause:nist_sp800_34:\u00a72.1", "type": "FrameworkClause", "label": "\u00a72.1", "framework": "nist_sp800_34" }, { "id": "clause:nist_sp800_34:\u00a72.2", "type": "FrameworkClause", "label": "\u00a72.2", "framework": "nist_sp800_34" }, { "id": "clause:nist_sp800_34:\u00a73.1", "type": "FrameworkClause", "label": "\u00a73.1", "framework": "nist_sp800_34" }, { "id": "clause:nist_sp800_34:\u00a73.2", "type": "FrameworkClause", "label": "\u00a73.2", "framework": "nist_sp800_34" }, { "id": "clause:nist_sp800_34:\u00a73.3", "type": "FrameworkClause", "label": "\u00a73.3", "framework": "nist_sp800_34" }, { "id": "clause:nist_sp800_34:\u00a73.4", "type": "FrameworkClause", "label": "\u00a73.4", "framework": "nist_sp800_34" }, { "id": "clause:nist_sp800_34:\u00a73.4.2", "type": "FrameworkClause", "label": "\u00a73.4.2", "framework": "nist_sp800_34" }, { "id": "clause:nist_sp800_34:\u00a73.4.3", "type": "FrameworkClause", "label": "\u00a73.4.3", "framework": "nist_sp800_34" }, { "id": "clause:nist_sp800_34:\u00a73.5", "type": "FrameworkClause", "label": "\u00a73.5", "framework": "nist_sp800_34" }, { "id": "clause:nist_sp800_34:\u00a73.6", "type": "FrameworkClause", "label": "\u00a73.6", "framework": "nist_sp800_34" }, { "id": "clause:nist_sp800_34:\u00a74.2", "type": "FrameworkClause", "label": "\u00a74.2", "framework": "nist_sp800_34" }, { "id": "clause:nist_sp800_34:\u00a74.2.2", "type": "FrameworkClause", "label": "\u00a74.2.2", "framework": "nist_sp800_34" }, { "id": "clause:nist_sp800_34:\u00a74.4", "type": "FrameworkClause", "label": "\u00a74.4", "framework": "nist_sp800_34" }, { "id": "clause:nist_zt:\u00a72.1", "type": "FrameworkClause", "label": "\u00a72.1", "framework": "nist_zt" }, { "id": "clause:nist_zt:\u00a73.3", "type": "FrameworkClause", "label": "\u00a73.3", "framework": "nist_zt" }, { "id": "clause:nist_zt:\u00a73.4.1", "type": "FrameworkClause", "label": "\u00a73.4.1", "framework": "nist_zt" }, { "id": "clause:nist_zt:\u00a75.7", "type": "FrameworkClause", "label": "\u00a75.7", "framework": "nist_zt" }, { "id": "clause:nist_zt:Tenet 1", "type": "FrameworkClause", "label": "Tenet 1", "framework": "nist_zt" }, { "id": "clause:nist_zt:Tenet 3", "type": "FrameworkClause", "label": "Tenet 3", "framework": "nist_zt" }, { "id": "clause:nist_zt:Tenet 4", "type": "FrameworkClause", "label": "Tenet 4", "framework": "nist_zt" }, { "id": "clause:nist_zt:Tenet 5", "type": "FrameworkClause", "label": "Tenet 5", "framework": "nist_zt" }, { "id": "clause:nist_zt:Tenet 6", "type": "FrameworkClause", "label": "Tenet 6", "framework": "nist_zt" }, { "id": "clause:nist_zt:Tenet 7", "type": "FrameworkClause", "label": "Tenet 7", "framework": "nist_zt" }, { "id": "clause:nyc_ll144:\u00a720-871 (Bias audit requirements)", "type": "FrameworkClause", "label": "\u00a720-871 (Bias audit requirements)", "framework": "nyc_ll144" }, { "id": "clause:oauth_bcp:\u00a72.1", "type": "FrameworkClause", "label": "\u00a72.1", "framework": "oauth_bcp" }, { "id": "clause:oauth_bcp:\u00a72.1.2", "type": "FrameworkClause", "label": "\u00a72.1.2", "framework": "oauth_bcp" }, { "id": "clause:occ_ai:Model Risk Management booklet (2021)", "type": "FrameworkClause", "label": "Model Risk Management booklet (2021)", "framework": "occ_ai" }, { "id": "clause:oecd_ai_principles:Principle 1.1", "type": "FrameworkClause", "label": "Principle 1.1", "framework": "oecd_ai_principles" }, { "id": "clause:oecd_ai_principles:Principle 1.2", "type": "FrameworkClause", "label": "Principle 1.2", "framework": "oecd_ai_principles" }, { "id": "clause:oecd_ai_principles:Principle 1.3", "type": "FrameworkClause", "label": "Principle 1.3", "framework": "oecd_ai_principles" }, { "id": "clause:oecd_ai_principles:Principle 1.4", "type": "FrameworkClause", "label": "Principle 1.4", "framework": "oecd_ai_principles" }, { "id": "clause:oecd_ai_principles:Principle 1.5", "type": "FrameworkClause", "label": "Principle 1.5", "framework": "oecd_ai_principles" }, { "id": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "FrameworkClause", "label": "Principles 1.1\u20131.5", "framework": "oecd_ai_principles" }, { "id": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "FrameworkClause", "label": "Principles 1.3, 1.4", "framework": "oecd_ai_principles" }, { "id": "clause:oecd_cg:II.F / IV.A \u2014 Related party transactions \u2014 approval and disc", "type": "FrameworkClause", "label": "II.F / IV.A \u2014 Related party transactions \u2014 approval and disc", "framework": "oecd_cg" }, { "id": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "FrameworkClause", "label": "IV \u2014 Disclosure and transparency", "framework": "oecd_cg" }, { "id": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (oversight, acc", "type": "FrameworkClause", "label": "V.D \u2014 Board responsibilities \u2014 key functions (oversight, acc", "framework": "oecd_cg" }, { "id": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "type": "FrameworkClause", "label": "V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "framework": "oecd_cg" }, { "id": "clause:oidc_federation:\u00a79", "type": "FrameworkClause", "label": "\u00a79", "framework": "oidc_federation" }, { "id": "clause:okta_authz:Okta Authorization Server \u2014 Commitment-Scoped Token Restrict", "type": "FrameworkClause", "label": "Okta Authorization Server \u2014 Commitment-Scoped Token Restrict", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta Authorization Server \u2014 OAuth 2.0 Delegation Constraints", "type": "FrameworkClause", "label": "Okta Authorization Server \u2014 OAuth 2.0 Delegation Constraints", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta Authorization Server \u2014 Signed Token Claims as Authoriza", "type": "FrameworkClause", "label": "Okta Authorization Server \u2014 Signed Token Claims as Authoriza", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta Authorization Server \u2014 Time-Bounded Approval-Scoped Tok", "type": "FrameworkClause", "label": "Okta Authorization Server \u2014 Time-Bounded Approval-Scoped Tok", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta Behavior Detection + System Log \u2014 Sign-In Anomaly Signa", "type": "FrameworkClause", "label": "Okta Behavior Detection + System Log \u2014 Sign-In Anomaly Signa", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta Event Hooks \u2014 Authorization Policy Change Notifications", "type": "FrameworkClause", "label": "Okta Event Hooks \u2014 Authorization Policy Change Notifications", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta Fine-Grained Authorization \u2014 Knowledge Resource Access", "type": "FrameworkClause", "label": "Okta Fine-Grained Authorization \u2014 Knowledge Resource Access", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta for AI Agents \u2014 Scoped Token Authorization", "type": "FrameworkClause", "label": "Okta for AI Agents \u2014 Scoped Token Authorization", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta Identity Tokens \u2014 Principal Identity Binding for AI Age", "type": "FrameworkClause", "label": "Okta Identity Tokens \u2014 Principal Identity Binding for AI Age", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta Privileged Access + Okta Workflows \u2014 Emergency Override", "type": "FrameworkClause", "label": "Okta Privileged Access + Okta Workflows \u2014 Emergency Override", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta System Log \u2014 Authorization Policy Adherence Monitoring", "type": "FrameworkClause", "label": "Okta System Log \u2014 Authorization Policy Adherence Monitoring", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta System Log \u2014 Identity-Mediated Procurement Authorizatio", "type": "FrameworkClause", "label": "Okta System Log \u2014 Identity-Mediated Procurement Authorizatio", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Authorization Decision Reco", "type": "FrameworkClause", "label": "Okta System Log \u2014 Non-Repudiable Authorization Decision Reco", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Contract Authorization Evid", "type": "FrameworkClause", "label": "Okta System Log \u2014 Non-Repudiable Contract Authorization Evid", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta System Log + Identity Governance Reports \u2014 Authority Li", "type": "FrameworkClause", "label": "Okta System Log + Identity Governance Reports \u2014 Authority Li", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta System Log Compliance Reports \u2014 Authorization Audit Evi", "type": "FrameworkClause", "label": "Okta System Log Compliance Reports \u2014 Authorization Audit Evi", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta Workflows \u2014 Automated Escalation Gate Enforcement", "type": "FrameworkClause", "label": "Okta Workflows \u2014 Automated Escalation Gate Enforcement", "framework": "okta_authz" }, { "id": "clause:okta_authz:Okta Workflows \u2014 Multi-Party Token Approval Chains", "type": "FrameworkClause", "label": "Okta Workflows \u2014 Multi-Party Token Approval Chains", "framework": "okta_authz" }, { "id": "clause:okta_financial:Okta access management", "type": "FrameworkClause", "label": "Okta access management", "framework": "okta_financial" }, { "id": "clause:okta_financial:Okta Adaptive MFA", "type": "FrameworkClause", "label": "Okta Adaptive MFA", "framework": "okta_financial" }, { "id": "clause:okta_financial:Okta Privileged Access", "type": "FrameworkClause", "label": "Okta Privileged Access", "framework": "okta_financial" }, { "id": "clause:okta_financial:Okta System Log", "type": "FrameworkClause", "label": "Okta System Log", "framework": "okta_financial" }, { "id": "clause:okta_governance:Access certification", "type": "FrameworkClause", "label": "Access certification", "framework": "okta_governance" }, { "id": "clause:okta_governance:Access Certifications", "type": "FrameworkClause", "label": "Access Certifications", "framework": "okta_governance" }, { "id": "clause:okta_governance:Access Requests", "type": "FrameworkClause", "label": "Access Requests", "framework": "okta_governance" }, { "id": "clause:okta_governance:Audit reporting", "type": "FrameworkClause", "label": "Audit reporting", "framework": "okta_governance" }, { "id": "clause:okta_governance:Entitlement Management", "type": "FrameworkClause", "label": "Entitlement Management", "framework": "okta_governance" }, { "id": "clause:okta_governance:Workflows", "type": "FrameworkClause", "label": "Workflows", "framework": "okta_governance" }, { "id": "clause:okta_iam:Okta \u2014 Concurrent Session Detection", "type": "FrameworkClause", "label": "Okta \u2014 Concurrent Session Detection", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta \u2014 Multi Region Resilience", "type": "FrameworkClause", "label": "Okta \u2014 Multi Region Resilience", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta + DataGrail integration \u2014 automated DSR intake", "type": "FrameworkClause", "label": "Okta + DataGrail integration \u2014 automated DSR intake", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Access Certifications \u2014 Service Account Reviews", "type": "FrameworkClause", "label": "Okta Access Certifications \u2014 Service Account Reviews", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Adaptive MFA \u2014 Impossible Travel Detection", "type": "FrameworkClause", "label": "Okta Adaptive MFA \u2014 Impossible Travel Detection", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta API Access Management \u2014 OAuth scopes and consent", "type": "FrameworkClause", "label": "Okta API Access Management \u2014 OAuth scopes and consent", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Authorization Server \u2014 Scope Boundary Enforcement", "type": "FrameworkClause", "label": "Okta Authorization Server \u2014 Scope Boundary Enforcement", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Cross App Access \u2014 Identity Assertion Authorization Gra", "type": "FrameworkClause", "label": "Okta Cross App Access \u2014 Identity Assertion Authorization Gra", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Cross App Access \u2014 task-scoped resource tokens (RFC 869", "type": "FrameworkClause", "label": "Okta Cross App Access \u2014 task-scoped resource tokens (RFC 869", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta for AI Agents \u2014 Agent Registry", "type": "FrameworkClause", "label": "Okta for AI Agents \u2014 Agent Registry", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta for AI Agents \u2014 Assurance Levels", "type": "FrameworkClause", "label": "Okta for AI Agents \u2014 Assurance Levels", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta for AI Agents \u2014 Capability Manifest", "type": "FrameworkClause", "label": "Okta for AI Agents \u2014 Capability Manifest", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta for AI Agents \u2014 Minimum Privilege", "type": "FrameworkClause", "label": "Okta for AI Agents \u2014 Minimum Privilege", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta for AI Agents \u2014 Owner Binding", "type": "FrameworkClause", "label": "Okta for AI Agents \u2014 Owner Binding", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Identity Governance \u2014 Attestation Evidence", "type": "FrameworkClause", "label": "Okta Identity Governance \u2014 Attestation Evidence", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Identity Governance \u2014 Governance Structure", "type": "FrameworkClause", "label": "Okta Identity Governance \u2014 Governance Structure", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Identity Governance \u2014 Program Metrics", "type": "FrameworkClause", "label": "Okta Identity Governance \u2014 Program Metrics", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta ISPM \u2014 Credential Exposure Scanning", "type": "FrameworkClause", "label": "Okta ISPM \u2014 Credential Exposure Scanning", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta ISPM \u2014 Unmanaged Agent Discovery", "type": "FrameworkClause", "label": "Okta ISPM \u2014 Unmanaged Agent Discovery", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Lifecycle Management \u2014 account deactivation and deletio", "type": "FrameworkClause", "label": "Okta Lifecycle Management \u2014 account deactivation and deletio", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Lifecycle Management \u2014 account suspension states", "type": "FrameworkClause", "label": "Okta Lifecycle Management \u2014 account suspension states", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Lifecycle Management \u2014 automated deprovisioning workflo", "type": "FrameworkClause", "label": "Okta Lifecycle Management \u2014 automated deprovisioning workflo", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Lifecycle Management \u2014 Deprovisioning", "type": "FrameworkClause", "label": "Okta Lifecycle Management \u2014 Deprovisioning", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Lifecycle Management \u2014 Provisioning Gate", "type": "FrameworkClause", "label": "Okta Lifecycle Management \u2014 Provisioning Gate", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta OAuth \u2014 DPoP token binding (RFC 9449)", "type": "FrameworkClause", "label": "Okta OAuth \u2014 DPoP token binding (RFC 9449)", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta OAuth \u2014 Token Revocation Propagation", "type": "FrameworkClause", "label": "Okta OAuth \u2014 Token Revocation Propagation", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta OAuth \u2014 User Consent Framework", "type": "FrameworkClause", "label": "Okta OAuth \u2014 User Consent Framework", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta OIDC \u2014 Dynamic Client Registration", "type": "FrameworkClause", "label": "Okta OIDC \u2014 Dynamic Client Registration", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Privileged Access \u2014 Break Glass", "type": "FrameworkClause", "label": "Okta Privileged Access \u2014 Break Glass", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Privileged Access \u2014 Zero Standing Privilege", "type": "FrameworkClause", "label": "Okta Privileged Access \u2014 Zero Standing Privilege", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta real-time directory synchronization \u2014 consent state pro", "type": "FrameworkClause", "label": "Okta real-time directory synchronization \u2014 consent state pro", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta scoped administrator roles \u2014 least-privilege data expor", "type": "FrameworkClause", "label": "Okta scoped administrator roles \u2014 least-privilege data expor", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta System Log \u2014 real-time audit events", "type": "FrameworkClause", "label": "Okta System Log \u2014 real-time audit events", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta System Log \u2014 Token Exchange Audit", "type": "FrameworkClause", "label": "Okta System Log \u2014 Token Exchange Audit", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta ThreatInsight \u2014 Anomalous Auth Detection", "type": "FrameworkClause", "label": "Okta ThreatInsight \u2014 Anomalous Auth Detection", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta ThreatInsight \u2014 Machine Identity Baseline", "type": "FrameworkClause", "label": "Okta ThreatInsight \u2014 Machine Identity Baseline", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta trust page (trust.okta.com) \u2014 third-party audit certifi", "type": "FrameworkClause", "label": "Okta trust page (trust.okta.com) \u2014 third-party audit certifi", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Universal Directory \u2014 custom profile attributes for con", "type": "FrameworkClause", "label": "Okta Universal Directory \u2014 custom profile attributes for con", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Universal Directory \u2014 Federation Trust Config", "type": "FrameworkClause", "label": "Okta Universal Directory \u2014 Federation Trust Config", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Universal Directory \u2014 Human NHI Separation", "type": "FrameworkClause", "label": "Okta Universal Directory \u2014 Human NHI Separation", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Universal Directory \u2014 profile export APIs", "type": "FrameworkClause", "label": "Okta Universal Directory \u2014 profile export APIs", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Universal Directory and authentication policies \u2014 ident", "type": "FrameworkClause", "label": "Okta Universal Directory and authentication policies \u2014 ident", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Workflows \u2014 event-driven lifecycle automation", "type": "FrameworkClause", "label": "Okta Workflows \u2014 event-driven lifecycle automation", "framework": "okta_iam" }, { "id": "clause:okta_iam:Okta Workflows \u2014 Identity Incident Response", "type": "FrameworkClause", "label": "Okta Workflows \u2014 Identity Incident Response", "framework": "okta_iam" }, { "id": "clause:omb_a_123:Section II.A", "type": "FrameworkClause", "label": "Section II.A", "framework": "omb_a_123" }, { "id": "clause:omb_a_123:Section II.B", "type": "FrameworkClause", "label": "Section II.B", "framework": "omb_a_123" }, { "id": "clause:omb_a_123:Section III.A", "type": "FrameworkClause", "label": "Section III.A", "framework": "omb_a_123" }, { "id": "clause:omb_a_123:Section IV.A", "type": "FrameworkClause", "label": "Section IV.A", "framework": "omb_a_123" }, { "id": "clause:omb_a_123:Section VI", "type": "FrameworkClause", "label": "Section VI", "framework": "omb_a_123" }, { "id": "clause:omb_a_123:Section VI.A", "type": "FrameworkClause", "label": "Section VI.A", "framework": "omb_a_123" }, { "id": "clause:opa_rego:OPA Policy Language documentation (Rego)", "type": "FrameworkClause", "label": "OPA Policy Language documentation (Rego)", "framework": "opa_rego" }, { "id": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "FrameworkClause", "label": "API model versioning & deprecation policy", "framework": "openai_enterprise" }, { "id": "clause:openai_enterprise:Data Processing Addendum", "type": "FrameworkClause", "label": "Data Processing Addendum", "framework": "openai_enterprise" }, { "id": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "FrameworkClause", "label": "Enterprise Compliance API \u2014 audit logs", "framework": "openai_enterprise" }, { "id": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "FrameworkClause", "label": "Enterprise privacy \u2014 compliance commitments", "framework": "openai_enterprise" }, { "id": "clause:openai_enterprise:Zero data retention (API)", "type": "FrameworkClause", "label": "Zero data retention (API)", "framework": "openai_enterprise" }, { "id": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "FrameworkClause", "label": "Overview (published model behavior specification)", "framework": "openai_model_spec" }, { "id": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "FrameworkClause", "label": "Overview (spec structure: The chain of command; Stay in boun", "framework": "openai_model_spec" }, { "id": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "FrameworkClause", "label": "Overview; The chain of command; Stay in bounds", "framework": "openai_model_spec" }, { "id": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "FrameworkClause", "label": "Seek the truth together \u2014 Be honest and transparent", "framework": "openai_model_spec" }, { "id": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "FrameworkClause", "label": "Stay in bounds \u2014 Don't facilitate the targeted manipulation", "framework": "openai_model_spec" }, { "id": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "FrameworkClause", "label": "Stay in bounds \u2014 Try to prevent imminent real-world harm", "framework": "openai_model_spec" }, { "id": "clause:openai_model_spec:Stay in bounds (prohibited sexual content involving minors);", "type": "FrameworkClause", "label": "Stay in bounds (prohibited sexual content involving minors);", "framework": "openai_model_spec" }, { "id": "clause:openai_model_spec:Stay in bounds; Seek the truth together; Do the best work", "type": "FrameworkClause", "label": "Stay in bounds; Seek the truth together; Do the best work", "framework": "openai_model_spec" }, { "id": "clause:openai_model_spec:The chain of command", "type": "FrameworkClause", "label": "The chain of command", "framework": "openai_model_spec" }, { "id": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "FrameworkClause", "label": "The chain of command; Stay in bounds", "framework": "openai_model_spec" }, { "id": "clause:openai_policies:Data Processing Addendum", "type": "FrameworkClause", "label": "Data Processing Addendum", "framework": "openai_policies" }, { "id": "clause:openai_policies:Data residency commitments", "type": "FrameworkClause", "label": "Data residency commitments", "framework": "openai_policies" }, { "id": "clause:openai_policies:Enterprise DPA", "type": "FrameworkClause", "label": "Enterprise DPA", "framework": "openai_policies" }, { "id": "clause:openai_policies:Trust Portal", "type": "FrameworkClause", "label": "Trust Portal", "framework": "openai_policies" }, { "id": "clause:openai_policies:Usage Policies", "type": "FrameworkClause", "label": "Usage Policies", "framework": "openai_policies" }, { "id": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard decisions affecting deployed mod", "type": "FrameworkClause", "label": "\u00a74 Safeguarding \u2014 safeguard decisions affecting deployed mod", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven availability changes", "type": "FrameworkClause", "label": "\u00a74 Safeguarding \u2014 safeguard-driven availability changes", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment changes", "type": "FrameworkClause", "label": "\u00a74 Safeguarding \u2014 safeguard-driven deployment changes", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "type": "FrameworkClause", "label": "\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Capabilities and Safeguards Repor", "type": "FrameworkClause", "label": "\u00a75.1 Internal governance \u2014 Capabilities and Safeguards Repor", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 leadership risk ownership", "type": "FrameworkClause", "label": "\u00a75.1 Internal governance \u2014 leadership risk ownership", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Safety Advisory Group", "type": "FrameworkClause", "label": "\u00a75.1 Internal governance \u2014 Safety Advisory Group", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Building trust (\u00a75) \u2014 framework iteration and transparency", "type": "FrameworkClause", "label": "Building trust (\u00a75) \u2014 framework iteration and transparency", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "FrameworkClause", "label": "Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a75.1 Internal governanc", "type": "FrameworkClause", "label": "Capabilities and Safeguards Reports (\u00a75.1 Internal governanc", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical capability levels", "type": "FrameworkClause", "label": "Capability thresholds \u2014 High and Critical capability levels", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical levels", "type": "FrameworkClause", "label": "Capability thresholds \u2014 High and Critical levels", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Internal governance (\u00a75.1)", "type": "FrameworkClause", "label": "Internal governance (\u00a75.1)", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Internal governance (\u00a75.1) \u2014 Safety Advisory Group", "type": "FrameworkClause", "label": "Internal governance (\u00a75.1) \u2014 Safety Advisory Group", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "FrameworkClause", "label": "Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Measuring capabilities (\u00a73) and Internal governance (\u00a75.1)", "type": "FrameworkClause", "label": "Measuring capabilities (\u00a73) and Internal governance (\u00a75.1)", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:OpenAI Usage Policies \u2014 Permitted Use and Representation Gov", "type": "FrameworkClause", "label": "OpenAI Usage Policies \u2014 Permitted Use and Representation Gov", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Disclosure and G", "type": "FrameworkClause", "label": "Preparedness Framework v2 \u2014 Building Trust (Disclosure and G", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Documented Evalu", "type": "FrameworkClause", "label": "Preparedness Framework v2 \u2014 Building Trust (Documented Evalu", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Ongoing Evaluati", "type": "FrameworkClause", "label": "Preparedness Framework v2 \u2014 Building Trust (Ongoing Evaluati", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Research Categories (Long-Range", "type": "FrameworkClause", "label": "Preparedness Framework v2 \u2014 Research Categories (Long-Range", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Reporting", "type": "FrameworkClause", "label": "Preparedness Framework v2 \u2014 Safety Advisory Group Reporting", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review", "type": "FrameworkClause", "label": "Preparedness Framework v2 \u2014 Safety Advisory Group Review", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review and", "type": "FrameworkClause", "label": "Preparedness Framework v2 \u2014 Safety Advisory Group Review and", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Preparedness Framework v2 \u2014 System Cards and Safeguards Repo", "type": "FrameworkClause", "label": "Preparedness Framework v2 \u2014 System Cards and Safeguards Repo", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Tracked Categories and Deploymen", "type": "FrameworkClause", "label": "Preparedness Framework v2 \u2014 Tracked Categories and Deploymen", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "FrameworkClause", "label": "Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "FrameworkClause", "label": "Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy and Autonom", "type": "FrameworkClause", "label": "Research Categories (\u00a72.3) \u2014 Long-range Autonomy and Autonom", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Sandbagging and Long-range Auto", "type": "FrameworkClause", "label": "Research Categories (\u00a72.3) \u2014 Sandbagging and Long-range Auto", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "FrameworkClause", "label": "Safeguarding against severe harm (\u00a74)", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "type": "FrameworkClause", "label": "Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "FrameworkClause", "label": "Safeguards Reports (\u00a74)", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Safeguards Reports (\u00a74) and Internal governance (\u00a75.1)", "type": "FrameworkClause", "label": "Safeguards Reports (\u00a74) and Internal governance (\u00a75.1)", "framework": "openai_preparedness" }, { "id": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "type": "FrameworkClause", "label": "Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "framework": "openai_preparedness" }, { "id": "clause:openai_privacy:OpenAI API \u2014 customer data export", "type": "FrameworkClause", "label": "OpenAI API \u2014 customer data export", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI API data controls \u2014 retention and training configurat", "type": "FrameworkClause", "label": "OpenAI API data controls \u2014 retention and training configurat", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI API data retention policy \u2014 30-day default", "type": "FrameworkClause", "label": "OpenAI API data retention policy \u2014 30-day default", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI API log retention \u2014 30-day abuse monitoring window", "type": "FrameworkClause", "label": "OpenAI API log retention \u2014 30-day abuse monitoring window", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI API usage monitoring \u2014 data control configuration aud", "type": "FrameworkClause", "label": "OpenAI API usage monitoring \u2014 data control configuration aud", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI certifications \u2014 SOC 2, ISO 27001, ISO 42001", "type": "FrameworkClause", "label": "OpenAI certifications \u2014 SOC 2, ISO 27001, ISO 42001", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI compliance certifications \u2014 SOC 2, ISO 27001, ISO 420", "type": "FrameworkClause", "label": "OpenAI compliance certifications \u2014 SOC 2, ISO 27001, ISO 420", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI data deletion controls", "type": "FrameworkClause", "label": "OpenAI data deletion controls", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 customer content and train", "type": "FrameworkClause", "label": "OpenAI Data Processing Addendum \u2014 customer content and train", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "type": "FrameworkClause", "label": "OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI data residency \u2014 regional offerings", "type": "FrameworkClause", "label": "OpenAI data residency \u2014 regional offerings", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI data residency \u2014 regional storage options", "type": "FrameworkClause", "label": "OpenAI data residency \u2014 regional storage options", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI DPA and security documentation \u2014 customer transfer as", "type": "FrameworkClause", "label": "OpenAI DPA and security documentation \u2014 customer transfer as", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI enterprise data controls \u2014 business data not used for", "type": "FrameworkClause", "label": "OpenAI enterprise data controls \u2014 business data not used for", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI Enterprise Privacy \u2014 customer responsibility for lawf", "type": "FrameworkClause", "label": "OpenAI Enterprise Privacy \u2014 customer responsibility for lawf", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI privacy request channels (privacy.openai.com / dsar@o", "type": "FrameworkClause", "label": "OpenAI privacy request channels (privacy.openai.com / dsar@o", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI privacy request fulfillment \u2014 personal data access", "type": "FrameworkClause", "label": "OpenAI privacy request fulfillment \u2014 personal data access", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI privacy request processing \u2014 data deletion", "type": "FrameworkClause", "label": "OpenAI privacy request processing \u2014 data deletion", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI privacy request records", "type": "FrameworkClause", "label": "OpenAI privacy request records", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI security practices \u2014 AES-256 at rest, TLS 1.2+ in tra", "type": "FrameworkClause", "label": "OpenAI security practices \u2014 AES-256 at rest, TLS 1.2+ in tra", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "type": "FrameworkClause", "label": "OpenAI sub-processor list \u2014 DPA notification rights", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI system cards \u2014 model behavior transparency", "type": "FrameworkClause", "label": "OpenAI system cards \u2014 model behavior transparency", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI trust and compliance documentation", "type": "FrameworkClause", "label": "OpenAI trust and compliance documentation", "framework": "openai_privacy" }, { "id": "clause:openai_privacy:OpenAI usage policies \u2014 restricted inference uses", "type": "FrameworkClause", "label": "OpenAI usage policies \u2014 restricted inference uses", "framework": "openai_privacy" }, { "id": "clause:openai_sf:OpenAI Enterprise Compliance API \u2014 audit and auth log export", "type": "FrameworkClause", "label": "OpenAI Enterprise Compliance API \u2014 audit and auth log export", "framework": "openai_sf" }, { "id": "clause:openai_sf:Preparedness Framework v2 \u2014 'Building trust' public disclosu", "type": "FrameworkClause", "label": "Preparedness Framework v2 \u2014 'Building trust' public disclosu", "framework": "openai_sf" }, { "id": "clause:openai_sf:Preparedness Framework v2 \u2014 safeguards for High-capability d", "type": "FrameworkClause", "label": "Preparedness Framework v2 \u2014 safeguards for High-capability d", "framework": "openai_sf" }, { "id": "clause:openai_transparency:System Card \u2014 Knowledge Limitations", "type": "FrameworkClause", "label": "System Card \u2014 Knowledge Limitations", "framework": "openai_transparency" }, { "id": "clause:openid:OpenID Connect Core 1.0 \u00a73.1", "type": "FrameworkClause", "label": "OpenID Connect Core 1.0 \u00a73.1", "framework": "openid" }, { "id": "clause:openid:RFC 9396", "type": "FrameworkClause", "label": "RFC 9396", "framework": "openid" }, { "id": "clause:openid:RFC 9396 \u00a72", "type": "FrameworkClause", "label": "RFC 9396 \u00a72", "framework": "openid" }, { "id": "clause:openid:RFC 9396 \u00a76", "type": "FrameworkClause", "label": "RFC 9396 \u00a76", "framework": "openid" }, { "id": "clause:openid:RFC 9449", "type": "FrameworkClause", "label": "RFC 9449", "framework": "openid" }, { "id": "clause:openlineage:Run events (OpenLineage OpenAPI spec)", "type": "FrameworkClause", "label": "Run events (OpenLineage OpenAPI spec)", "framework": "openlineage" }, { "id": "clause:openlineage:RunEvent object (OpenLineage.json JSON Schema)", "type": "FrameworkClause", "label": "RunEvent object (OpenLineage.json JSON Schema)", "framework": "openlineage" }, { "id": "clause:owasp_ai_exchange:aiprogram", "type": "FrameworkClause", "label": "aiprogram", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:aitransparency", "type": "FrameworkClause", "label": "aitransparency", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:alloweddata", "type": "FrameworkClause", "label": "alloweddata", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:anomalousinputhandling", "type": "FrameworkClause", "label": "anomalousinputhandling", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:augdataintegrity", "type": "FrameworkClause", "label": "augdataintegrity", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:checkcompliance", "type": "FrameworkClause", "label": "checkcompliance", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:confcompute", "type": "FrameworkClause", "label": "confcompute", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:continuousvalidation", "type": "FrameworkClause", "label": "continuousvalidation", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:dataminimize", "type": "FrameworkClause", "label": "dataminimize", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "FrameworkClause", "label": "dataqualitycontrol", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:discrete", "type": "FrameworkClause", "label": "discrete", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:encodemodeloutput", "type": "FrameworkClause", "label": "encodemodeloutput", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:evasioninputhandling", "type": "FrameworkClause", "label": "evasioninputhandling", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:explainability", "type": "FrameworkClause", "label": "explainability", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:inputsegregation", "type": "FrameworkClause", "label": "inputsegregation", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "FrameworkClause", "label": "leastmodelprivilege", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:limitresources", "type": "FrameworkClause", "label": "limitresources", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "FrameworkClause", "label": "modelaccesscontrol", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:modelalignment", "type": "FrameworkClause", "label": "modelalignment", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:modelobfuscation", "type": "FrameworkClause", "label": "modelobfuscation", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:monitoruse", "type": "FrameworkClause", "label": "monitoruse", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "FrameworkClause", "label": "obfuscatetrainingdata", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:oversight", "type": "FrameworkClause", "label": "oversight", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "FrameworkClause", "label": "poisonrobustmodel", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "FrameworkClause", "label": "promptinjectioniohandling", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:ratelimit", "type": "FrameworkClause", "label": "ratelimit", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "FrameworkClause", "label": "runtimemodelintegrity", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:runtimemodeliointegrity", "type": "FrameworkClause", "label": "runtimemodeliointegrity", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:secdevprogram", "type": "FrameworkClause", "label": "secdevprogram", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:seceducate", "type": "FrameworkClause", "label": "seceducate", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:secprogram", "type": "FrameworkClause", "label": "secprogram", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:segregatedata", "type": "FrameworkClause", "label": "segregatedata", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "FrameworkClause", "label": "sensitiveoutputhandling", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:shortretain", "type": "FrameworkClause", "label": "shortretain", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:supplychainmanage", "type": "FrameworkClause", "label": "supplychainmanage", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "FrameworkClause", "label": "unwantedbiastesting", "framework": "owasp_ai_exchange" }, { "id": "clause:owasp_aisvs:C1.1.5", "type": "FrameworkClause", "label": "C1.1.5", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C10.1.1", "type": "FrameworkClause", "label": "C10.1.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C10.1.2", "type": "FrameworkClause", "label": "C10.1.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C10.1.3", "type": "FrameworkClause", "label": "C10.1.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C10.2.4", "type": "FrameworkClause", "label": "C10.2.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C10.2.5", "type": "FrameworkClause", "label": "C10.2.5", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C10.3.3", "type": "FrameworkClause", "label": "C10.3.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C10.3.4", "type": "FrameworkClause", "label": "C10.3.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C10.4.1", "type": "FrameworkClause", "label": "C10.4.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C10.4.2", "type": "FrameworkClause", "label": "C10.4.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C10.4.3", "type": "FrameworkClause", "label": "C10.4.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C10.4.8", "type": "FrameworkClause", "label": "C10.4.8", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C11.1.2", "type": "FrameworkClause", "label": "C11.1.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C11.1.3", "type": "FrameworkClause", "label": "C11.1.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C11.1.5", "type": "FrameworkClause", "label": "C11.1.5", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C11.2.2", "type": "FrameworkClause", "label": "C11.2.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C11.2.3", "type": "FrameworkClause", "label": "C11.2.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C11.2.5", "type": "FrameworkClause", "label": "C11.2.5", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C12.1.1", "type": "FrameworkClause", "label": "C12.1.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C12.1.2", "type": "FrameworkClause", "label": "C12.1.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C12.1.3", "type": "FrameworkClause", "label": "C12.1.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C12.2.1", "type": "FrameworkClause", "label": "C12.2.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C12.2.2", "type": "FrameworkClause", "label": "C12.2.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C12.2.3", "type": "FrameworkClause", "label": "C12.2.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C12.2.5", "type": "FrameworkClause", "label": "C12.2.5", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C12.2.6", "type": "FrameworkClause", "label": "C12.2.6", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C12.4.1", "type": "FrameworkClause", "label": "C12.4.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C12.4.2", "type": "FrameworkClause", "label": "C12.4.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C12.5.3", "type": "FrameworkClause", "label": "C12.5.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C2.1.3", "type": "FrameworkClause", "label": "C2.1.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C2.1.4", "type": "FrameworkClause", "label": "C2.1.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C2.1.6", "type": "FrameworkClause", "label": "C2.1.6", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C2.1.7", "type": "FrameworkClause", "label": "C2.1.7", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C2.2.2", "type": "FrameworkClause", "label": "C2.2.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C2.2.3", "type": "FrameworkClause", "label": "C2.2.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C2.2.4", "type": "FrameworkClause", "label": "C2.2.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C3.1.1", "type": "FrameworkClause", "label": "C3.1.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C3.1.3", "type": "FrameworkClause", "label": "C3.1.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C3.2.3", "type": "FrameworkClause", "label": "C3.2.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C3.3.1", "type": "FrameworkClause", "label": "C3.3.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C3.3.2", "type": "FrameworkClause", "label": "C3.3.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C4.1.1", "type": "FrameworkClause", "label": "C4.1.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C4.2.1", "type": "FrameworkClause", "label": "C4.2.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C4.2.2", "type": "FrameworkClause", "label": "C4.2.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C4.2.3", "type": "FrameworkClause", "label": "C4.2.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C4.2.4", "type": "FrameworkClause", "label": "C4.2.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C4.2.5", "type": "FrameworkClause", "label": "C4.2.5", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C4.3.4", "type": "FrameworkClause", "label": "C4.3.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C5.1.2", "type": "FrameworkClause", "label": "C5.1.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C5.2.1", "type": "FrameworkClause", "label": "C5.2.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C5.2.2", "type": "FrameworkClause", "label": "C5.2.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C5.2.4", "type": "FrameworkClause", "label": "C5.2.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C5.2.5", "type": "FrameworkClause", "label": "C5.2.5", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C6.1.1", "type": "FrameworkClause", "label": "C6.1.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C6.1.3", "type": "FrameworkClause", "label": "C6.1.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C6.1.4", "type": "FrameworkClause", "label": "C6.1.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C6.2.1", "type": "FrameworkClause", "label": "C6.2.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C6.2.2", "type": "FrameworkClause", "label": "C6.2.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C6.2.3", "type": "FrameworkClause", "label": "C6.2.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C7.1.1", "type": "FrameworkClause", "label": "C7.1.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C7.3.2", "type": "FrameworkClause", "label": "C7.3.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C7.3.3", "type": "FrameworkClause", "label": "C7.3.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C7.3.4", "type": "FrameworkClause", "label": "C7.3.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C7.4.1", "type": "FrameworkClause", "label": "C7.4.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C7.4.2", "type": "FrameworkClause", "label": "C7.4.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C7.4.4", "type": "FrameworkClause", "label": "C7.4.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C8.2.1", "type": "FrameworkClause", "label": "C8.2.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C8.2.3", "type": "FrameworkClause", "label": "C8.2.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C8.2.4", "type": "FrameworkClause", "label": "C8.2.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C8.3.1", "type": "FrameworkClause", "label": "C8.3.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C8.3.2", "type": "FrameworkClause", "label": "C8.3.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.1.1", "type": "FrameworkClause", "label": "C9.1.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.1.2", "type": "FrameworkClause", "label": "C9.1.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.1.3", "type": "FrameworkClause", "label": "C9.1.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.2.1", "type": "FrameworkClause", "label": "C9.2.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.2.10", "type": "FrameworkClause", "label": "C9.2.10", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.2.2", "type": "FrameworkClause", "label": "C9.2.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.2.3", "type": "FrameworkClause", "label": "C9.2.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.2.4", "type": "FrameworkClause", "label": "C9.2.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.2.5", "type": "FrameworkClause", "label": "C9.2.5", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.2.6", "type": "FrameworkClause", "label": "C9.2.6", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.2.7", "type": "FrameworkClause", "label": "C9.2.7", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.2.8", "type": "FrameworkClause", "label": "C9.2.8", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.3.1", "type": "FrameworkClause", "label": "C9.3.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.3.2", "type": "FrameworkClause", "label": "C9.3.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.3.3", "type": "FrameworkClause", "label": "C9.3.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.3.4", "type": "FrameworkClause", "label": "C9.3.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.3.5", "type": "FrameworkClause", "label": "C9.3.5", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.3.7", "type": "FrameworkClause", "label": "C9.3.7", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.3.8", "type": "FrameworkClause", "label": "C9.3.8", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.4.1", "type": "FrameworkClause", "label": "C9.4.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.4.2", "type": "FrameworkClause", "label": "C9.4.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.4.3", "type": "FrameworkClause", "label": "C9.4.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.4.4", "type": "FrameworkClause", "label": "C9.4.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.5.1", "type": "FrameworkClause", "label": "C9.5.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.5.2", "type": "FrameworkClause", "label": "C9.5.2", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.5.3", "type": "FrameworkClause", "label": "C9.5.3", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.5.4", "type": "FrameworkClause", "label": "C9.5.4", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.5.5", "type": "FrameworkClause", "label": "C9.5.5", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.5.6", "type": "FrameworkClause", "label": "C9.5.6", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aisvs:C9.6.1", "type": "FrameworkClause", "label": "C9.6.1", "framework": "owasp_aisvs" }, { "id": "clause:owasp_aitg:AITG-APP-01", "type": "FrameworkClause", "label": "AITG-APP-01", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-APP-05", "type": "FrameworkClause", "label": "AITG-APP-05", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-APP-06", "type": "FrameworkClause", "label": "AITG-APP-06", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-APP-10", "type": "FrameworkClause", "label": "AITG-APP-10", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-APP-13", "type": "FrameworkClause", "label": "AITG-APP-13", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-APP-14", "type": "FrameworkClause", "label": "AITG-APP-14", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-DAT-03", "type": "FrameworkClause", "label": "AITG-DAT-03", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-DAT-05", "type": "FrameworkClause", "label": "AITG-DAT-05", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-INF-01", "type": "FrameworkClause", "label": "AITG-INF-01", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-INF-04", "type": "FrameworkClause", "label": "AITG-INF-04", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-INF-05", "type": "FrameworkClause", "label": "AITG-INF-05", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-MOD-01", "type": "FrameworkClause", "label": "AITG-MOD-01", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-MOD-02", "type": "FrameworkClause", "label": "AITG-MOD-02", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-MOD-03", "type": "FrameworkClause", "label": "AITG-MOD-03", "framework": "owasp_aitg" }, { "id": "clause:owasp_aitg:AITG-MOD-06", "type": "FrameworkClause", "label": "AITG-MOD-06", "framework": "owasp_aitg" }, { "id": "clause:owasp_aivss:AIVSS-AARS", "type": "FrameworkClause", "label": "AIVSS-AARS", "framework": "owasp_aivss" }, { "id": "clause:owasp_asi:ASI01", "type": "FrameworkClause", "label": "ASI01", "framework": "owasp_asi" }, { "id": "clause:owasp_asi:ASI02", "type": "FrameworkClause", "label": "ASI02", "framework": "owasp_asi" }, { "id": "clause:owasp_asi:ASI03", "type": "FrameworkClause", "label": "ASI03", "framework": "owasp_asi" }, { "id": "clause:owasp_asi:ASI04", "type": "FrameworkClause", "label": "ASI04", "framework": "owasp_asi" }, { "id": "clause:owasp_asi:ASI05", "type": "FrameworkClause", "label": "ASI05", "framework": "owasp_asi" }, { "id": "clause:owasp_asi:ASI06", "type": "FrameworkClause", "label": "ASI06", "framework": "owasp_asi" }, { "id": "clause:owasp_asi:ASI07", "type": "FrameworkClause", "label": "ASI07", "framework": "owasp_asi" }, { "id": "clause:owasp_asi:ASI08", "type": "FrameworkClause", "label": "ASI08", "framework": "owasp_asi" }, { "id": "clause:owasp_asi:ASI09", "type": "FrameworkClause", "label": "ASI09", "framework": "owasp_asi" }, { "id": "clause:owasp_asi:ASI10", "type": "FrameworkClause", "label": "ASI10", "framework": "owasp_asi" }, { "id": "clause:owasp_llm10:LLM01:2025", "type": "FrameworkClause", "label": "2025", "framework": "owasp_llm10" }, { "id": "clause:owasp_llm10:LLM02:2025", "type": "FrameworkClause", "label": "2025", "framework": "owasp_llm10" }, { "id": "clause:owasp_llm10:LLM03:2025", "type": "FrameworkClause", "label": "2025", "framework": "owasp_llm10" }, { "id": "clause:owasp_llm10:LLM04:2025", "type": "FrameworkClause", "label": "2025", "framework": "owasp_llm10" }, { "id": "clause:owasp_llm10:LLM05:2025", "type": "FrameworkClause", "label": "2025", "framework": "owasp_llm10" }, { "id": "clause:owasp_llm10:LLM06:2025", "type": "FrameworkClause", "label": "2025", "framework": "owasp_llm10" }, { "id": "clause:owasp_llm10:LLM07:2025", "type": "FrameworkClause", "label": "2025", "framework": "owasp_llm10" }, { "id": "clause:owasp_llm10:LLM08:2025", "type": "FrameworkClause", "label": "2025", "framework": "owasp_llm10" }, { "id": "clause:owasp_llm10:LLM10:2025", "type": "FrameworkClause", "label": "2025", "framework": "owasp_llm10" }, { "id": "clause:owasp_ml_top10:ML02:2023", "type": "FrameworkClause", "label": "ML02:2023", "framework": "owasp_ml_top10" }, { "id": "clause:owasp_ml_top10:ML03:2023", "type": "FrameworkClause", "label": "ML03:2023", "framework": "owasp_ml_top10" }, { "id": "clause:owasp_ml_top10:ML06:2023", "type": "FrameworkClause", "label": "ML06:2023", "framework": "owasp_ml_top10" }, { "id": "clause:owasp_ml_top10:ML10:2023", "type": "FrameworkClause", "label": "ML10:2023", "framework": "owasp_ml_top10" }, { "id": "clause:owasp_nhi:NHI10", "type": "FrameworkClause", "label": "NHI10", "framework": "owasp_nhi" }, { "id": "clause:owasp_nhi:NHI3", "type": "FrameworkClause", "label": "NHI3", "framework": "owasp_nhi" }, { "id": "clause:owasp_nhi:NHI7", "type": "FrameworkClause", "label": "NHI7", "framework": "owasp_nhi" }, { "id": "clause:owasp_nhi10:NHI1:2025", "type": "FrameworkClause", "label": "2025", "framework": "owasp_nhi10" }, { "id": "clause:owasp_nhi10:NHI2:2025", "type": "FrameworkClause", "label": "2025", "framework": "owasp_nhi10" }, { "id": "clause:owasp_nhi10:NHI5:2025", "type": "FrameworkClause", "label": "2025", "framework": "owasp_nhi10" }, { "id": "clause:pcaob_as_2201:\u00b6.14-.18", "type": "FrameworkClause", "label": "\u00b6.14-.18", "framework": "pcaob_as_2201" }, { "id": "clause:pcaob_as_2201:\u00b6.20", "type": "FrameworkClause", "label": "\u00b6.20", "framework": "pcaob_as_2201" }, { "id": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "FrameworkClause", "label": "\u00b6.24-.28", "framework": "pcaob_as_2201" }, { "id": "clause:pcaob_as_2201:\u00b6.39", "type": "FrameworkClause", "label": "\u00b6.39", "framework": "pcaob_as_2201" }, { "id": "clause:pcaob_as_2201:\u00b6.39-.40", "type": "FrameworkClause", "label": "\u00b6.39-.40", "framework": "pcaob_as_2201" }, { "id": "clause:pcaob_as_2201:\u00b6.39-.42", "type": "FrameworkClause", "label": "\u00b6.39-.42", "framework": "pcaob_as_2201" }, { "id": "clause:pcaob_as_2201:\u00b6.46", "type": "FrameworkClause", "label": "\u00b6.46", "framework": "pcaob_as_2201" }, { "id": "clause:pcaob_as_2201:\u00b6.62-.70", "type": "FrameworkClause", "label": "\u00b6.62-.70", "framework": "pcaob_as_2201" }, { "id": "clause:pcaob_as_2201:\u00b6.68-.76", "type": "FrameworkClause", "label": "\u00b6.68-.76", "framework": "pcaob_as_2201" }, { "id": "clause:pcaob_as_2201:\u00b6.72-.76", "type": "FrameworkClause", "label": "\u00b6.72-.76", "framework": "pcaob_as_2201" }, { "id": "clause:ping_identity:Ping Identity \u2014 Cross Organization Agent Auth", "type": "FrameworkClause", "label": "Ping Identity \u2014 Cross Organization Agent Auth", "framework": "ping_identity" }, { "id": "clause:ping_identity:Ping Identity \u2014 Federated Cross Org Authorization", "type": "FrameworkClause", "label": "Ping Identity \u2014 Federated Cross Org Authorization", "framework": "ping_identity" }, { "id": "clause:ping_identity:Ping Identity compliance certifications (SOC 2 Type II, ISO", "type": "FrameworkClause", "label": "Ping Identity compliance certifications (SOC 2 Type II, ISO", "framework": "ping_identity" }, { "id": "clause:ping_identity:Ping Identity for AI \u2014 Agent Gateway revocation", "type": "FrameworkClause", "label": "Ping Identity for AI \u2014 Agent Gateway revocation", "framework": "ping_identity" }, { "id": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core", "type": "FrameworkClause", "label": "Ping Identity for AI \u2014 Agent IAM Core", "framework": "ping_identity" }, { "id": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core delegation chain", "type": "FrameworkClause", "label": "Ping Identity for AI \u2014 Agent IAM Core delegation chain", "framework": "ping_identity" }, { "id": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core provisioning gate", "type": "FrameworkClause", "label": "Ping Identity for AI \u2014 Agent IAM Core provisioning gate", "framework": "ping_identity" }, { "id": "clause:ping_identity:Ping Identity for AI \u2014 Governance Capabilities", "type": "FrameworkClause", "label": "Ping Identity for AI \u2014 Governance Capabilities", "framework": "ping_identity" }, { "id": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Delegation Depth Limit", "type": "FrameworkClause", "label": "Ping Identity Runtime Identity \u2014 Delegation Depth Limit", "framework": "ping_identity" }, { "id": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Trust Framework", "type": "FrameworkClause", "label": "Ping Identity Runtime Identity \u2014 Trust Framework", "framework": "ping_identity" }, { "id": "clause:ping_identity:PingFederate \u2014 OIDC Audience Validation", "type": "FrameworkClause", "label": "PingFederate \u2014 OIDC Audience Validation", "framework": "ping_identity" }, { "id": "clause:ping_identity:PingFederate \u2014 Scope Reduction Enforcement", "type": "FrameworkClause", "label": "PingFederate \u2014 Scope Reduction Enforcement", "framework": "ping_identity" }, { "id": "clause:ping_identity:PingOne Credentials \u2014 eIDAS 2.0-aligned verifiable credentia", "type": "FrameworkClause", "label": "PingOne Credentials \u2014 eIDAS 2.0-aligned verifiable credentia", "framework": "ping_identity" }, { "id": "clause:ping_identity:PingOne Credentials \u2014 Verifiable Credentials", "type": "FrameworkClause", "label": "PingOne Credentials \u2014 Verifiable Credentials", "framework": "ping_identity" }, { "id": "clause:ping_identity:PingOne Credentials \u2014 W3C Verifiable Credentials / DID", "type": "FrameworkClause", "label": "PingOne Credentials \u2014 W3C Verifiable Credentials / DID", "framework": "ping_identity" }, { "id": "clause:pipl:55", "type": "FrameworkClause", "label": "55", "framework": "pipl" }, { "id": "clause:plot4ai:safety-and-environmental-impact", "type": "FrameworkClause", "label": "safety-and-environmental-impact", "framework": "plot4ai" }, { "id": "clause:plot4ai:transparency-and-accessibility", "type": "FrameworkClause", "label": "transparency-and-accessibility", "framework": "plot4ai" }, { "id": "clause:quebec_law25:3.3", "type": "FrameworkClause", "label": "3.3", "framework": "quebec_law25" }, { "id": "clause:salesforce_trust:Audit trail", "type": "FrameworkClause", "label": "Audit trail", "framework": "salesforce_trust" }, { "id": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "FrameworkClause", "label": "Audit trail and toxicity detection", "framework": "salesforce_trust" }, { "id": "clause:salesforce_trust:Data masking", "type": "FrameworkClause", "label": "Data masking", "framework": "salesforce_trust" }, { "id": "clause:salesforce_trust:Prompt defense", "type": "FrameworkClause", "label": "Prompt defense", "framework": "salesforce_trust" }, { "id": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "FrameworkClause", "label": "Secure data retrieval and dynamic grounding", "framework": "salesforce_trust" }, { "id": "clause:salesforce_trust:Secure data retrieval, dynamic grounding, and toxicity detec", "type": "FrameworkClause", "label": "Secure data retrieval, dynamic grounding, and toxicity detec", "framework": "salesforce_trust" }, { "id": "clause:salesforce_trust:Toxicity detection \u2014 output scoring", "type": "FrameworkClause", "label": "Toxicity detection \u2014 output scoring", "framework": "salesforce_trust" }, { "id": "clause:scim:RFC 7643 \u00a74.3", "type": "FrameworkClause", "label": "RFC 7643 \u00a74.3", "framework": "scim" }, { "id": "clause:scim:RFC 7644 \u00a73.3", "type": "FrameworkClause", "label": "RFC 7644 \u00a73.3", "framework": "scim" }, { "id": "clause:scim:RFC 7644 \u00a73.4", "type": "FrameworkClause", "label": "RFC 7644 \u00a73.4", "framework": "scim" }, { "id": "clause:scim:RFC 7644 \u00a73.4.2", "type": "FrameworkClause", "label": "RFC 7644 \u00a73.4.2", "framework": "scim" }, { "id": "clause:scim:RFC7644 \u00a73.3", "type": "FrameworkClause", "label": "RFC7644 \u00a73.3", "framework": "scim" }, { "id": "clause:scim:RFC7644 \u00a73.6", "type": "FrameworkClause", "label": "RFC7644 \u00a73.6", "framework": "scim" }, { "id": "clause:sec_ai:Proposed rule, Release 34-97990 (withdrawn 2025-06-12)", "type": "FrameworkClause", "label": "Proposed rule, Release 34-97990 (withdrawn 2025-06-12)", "framework": "sec_ai" }, { "id": "clause:snowflake_horizon:Access History", "type": "FrameworkClause", "label": "Access History", "framework": "snowflake_horizon" }, { "id": "clause:snowflake_horizon:Access History (object dependency lineage)", "type": "FrameworkClause", "label": "Access History (object dependency lineage)", "framework": "snowflake_horizon" }, { "id": "clause:snowflake_horizon:Data Quality \u2014 Quality Metric Functions", "type": "FrameworkClause", "label": "Data Quality \u2014 Quality Metric Functions", "framework": "snowflake_horizon" }, { "id": "clause:snowflake_horizon:Data Quality Monitoring (data metric functions)", "type": "FrameworkClause", "label": "Data Quality Monitoring (data metric functions)", "framework": "snowflake_horizon" }, { "id": "clause:snowflake_horizon:Object tagging", "type": "FrameworkClause", "label": "Object tagging", "framework": "snowflake_horizon" }, { "id": "clause:snowflake_horizon:Snowflake Data Metric Functions \u2014 History", "type": "FrameworkClause", "label": "Snowflake Data Metric Functions \u2014 History", "framework": "snowflake_horizon" }, { "id": "clause:soc2:A1.1 \u2014 Capacity management and monitoring", "type": "FrameworkClause", "label": "A1.1 \u2014 Capacity management and monitoring", "framework": "soc2" }, { "id": "clause:soc2:A1.2", "type": "FrameworkClause", "label": "A1.2", "framework": "soc2" }, { "id": "clause:soc2:CC1.1", "type": "FrameworkClause", "label": "CC1.1", "framework": "soc2" }, { "id": "clause:soc2:CC1.3", "type": "FrameworkClause", "label": "CC1.3", "framework": "soc2" }, { "id": "clause:soc2:CC1.4", "type": "FrameworkClause", "label": "CC1.4", "framework": "soc2" }, { "id": "clause:soc2:CC1.5", "type": "FrameworkClause", "label": "CC1.5", "framework": "soc2" }, { "id": "clause:soc2:CC2.1", "type": "FrameworkClause", "label": "CC2.1", "framework": "soc2" }, { "id": "clause:soc2:CC2.2", "type": "FrameworkClause", "label": "CC2.2", "framework": "soc2" }, { "id": "clause:soc2:CC2.2 & CC4.1", "type": "FrameworkClause", "label": "CC2.2 & CC4.1", "framework": "soc2" }, { "id": "clause:soc2:CC2.3", "type": "FrameworkClause", "label": "CC2.3", "framework": "soc2" }, { "id": "clause:soc2:CC2.3 \u2014 Communicates with external parties", "type": "FrameworkClause", "label": "CC2.3 \u2014 Communicates with external parties", "framework": "soc2" }, { "id": "clause:soc2:CC2.3 / CC7.4 \u2014 External communication and incident response", "type": "FrameworkClause", "label": "CC2.3 / CC7.4 \u2014 External communication and incident response", "framework": "soc2" }, { "id": "clause:soc2:CC3.1 \u2014 COSO Principle 6 \u2014 Specifies suitable objectives", "type": "FrameworkClause", "label": "CC3.1 \u2014 COSO Principle 6 \u2014 Specifies suitable objectives", "framework": "soc2" }, { "id": "clause:soc2:CC3.2", "type": "FrameworkClause", "label": "CC3.2", "framework": "soc2" }, { "id": "clause:soc2:CC4.1", "type": "FrameworkClause", "label": "CC4.1", "framework": "soc2" }, { "id": "clause:soc2:CC4.1 \u2014 COSO Principle 16 \u2014 ongoing and/or separate evaluati", "type": "FrameworkClause", "label": "CC4.1 \u2014 COSO Principle 16 \u2014 ongoing and/or separate evaluati", "framework": "soc2" }, { "id": "clause:soc2:CC4.1 and CC4.2", "type": "FrameworkClause", "label": "CC4.1 and CC4.2", "framework": "soc2" }, { "id": "clause:soc2:CC4.1, CC4.2", "type": "FrameworkClause", "label": "CC4.1, CC4.2", "framework": "soc2" }, { "id": "clause:soc2:CC4.2", "type": "FrameworkClause", "label": "CC4.2", "framework": "soc2" }, { "id": "clause:soc2:CC5.3", "type": "FrameworkClause", "label": "CC5.3", "framework": "soc2" }, { "id": "clause:soc2:CC6.1, CC7.1, CC9.2", "type": "FrameworkClause", "label": "CC6.1, CC7.1, CC9.2", "framework": "soc2" }, { "id": "clause:soc2:CC6.1, CC7.2", "type": "FrameworkClause", "label": "CC6.1, CC7.2", "framework": "soc2" }, { "id": "clause:soc2:CC6.6, CC6.7, CC7.2", "type": "FrameworkClause", "label": "CC6.6, CC6.7, CC7.2", "framework": "soc2" }, { "id": "clause:soc2:CC7.2", "type": "FrameworkClause", "label": "CC7.2", "framework": "soc2" }, { "id": "clause:soc2:CC7.2 \u2014 Detection and Monitoring", "type": "FrameworkClause", "label": "CC7.2 \u2014 Detection and Monitoring", "framework": "soc2" }, { "id": "clause:soc2:CC7.2 \u2014 Monitoring of system components", "type": "FrameworkClause", "label": "CC7.2 \u2014 Monitoring of system components", "framework": "soc2" }, { "id": "clause:soc2:CC7.2 \u2014 The entity monitors system components for anomalies", "type": "FrameworkClause", "label": "CC7.2 \u2014 The entity monitors system components for anomalies", "framework": "soc2" }, { "id": "clause:soc2:CC7.3", "type": "FrameworkClause", "label": "CC7.3", "framework": "soc2" }, { "id": "clause:soc2:CC7.4, CC7.5", "type": "FrameworkClause", "label": "CC7.4, CC7.5", "framework": "soc2" }, { "id": "clause:soc2:CC9.2", "type": "FrameworkClause", "label": "CC9.2", "framework": "soc2" }, { "id": "clause:soc2:P1.1", "type": "FrameworkClause", "label": "P1.1", "framework": "soc2" }, { "id": "clause:soc2:PI1.1", "type": "FrameworkClause", "label": "PI1.1", "framework": "soc2" }, { "id": "clause:sox:\u00a7301", "type": "FrameworkClause", "label": "\u00a7301", "framework": "sox" }, { "id": "clause:sox:\u00a7302", "type": "FrameworkClause", "label": "\u00a7302", "framework": "sox" }, { "id": "clause:sox:\u00a7302 & \u00a7404", "type": "FrameworkClause", "label": "\u00a7302 & \u00a7404", "framework": "sox" }, { "id": "clause:sox:\u00a7302, \u00a7404", "type": "FrameworkClause", "label": "\u00a7302, \u00a7404", "framework": "sox" }, { "id": "clause:sox:\u00a7302(a)(4)", "type": "FrameworkClause", "label": "\u00a7302(a)(4)", "framework": "sox" }, { "id": "clause:sox:\u00a7302(a)(5)", "type": "FrameworkClause", "label": "\u00a7302(a)(5)", "framework": "sox" }, { "id": "clause:sox:\u00a7404", "type": "FrameworkClause", "label": "\u00a7404", "framework": "sox" }, { "id": "clause:sox:\u00a7404(a)", "type": "FrameworkClause", "label": "\u00a7404(a)", "framework": "sox" }, { "id": "clause:sox:\u00a7404(b)", "type": "FrameworkClause", "label": "\u00a7404(b)", "framework": "sox" }, { "id": "clause:sox:Section 302", "type": "FrameworkClause", "label": "Section 302", "framework": "sox" }, { "id": "clause:sox:Section 302 & 404", "type": "FrameworkClause", "label": "Section 302 & 404", "framework": "sox" }, { "id": "clause:sox:Section 404", "type": "FrameworkClause", "label": "Section 404", "framework": "sox" }, { "id": "clause:spiffe_spire:SVID \u00a72", "type": "FrameworkClause", "label": "SVID \u00a72", "framework": "spiffe_spire" }, { "id": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "FrameworkClause", "label": "\u00a7III (Overview of Model Risk and MRM)", "framework": "sr26_2" }, { "id": "clause:sr26_2:\u00a7IV", "type": "FrameworkClause", "label": "\u00a7IV", "framework": "sr26_2" }, { "id": "clause:sr26_2:\u00a7V", "type": "FrameworkClause", "label": "\u00a7V", "framework": "sr26_2" }, { "id": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "FrameworkClause", "label": "\u00a7V (Conceptual Soundness)", "framework": "sr26_2" }, { "id": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "FrameworkClause", "label": "\u00a7V (Ongoing Model Monitoring)", "framework": "sr26_2" }, { "id": "clause:sr26_2:\u00a7V (Outcomes Analysis)", "type": "FrameworkClause", "label": "\u00a7V (Outcomes Analysis)", "framework": "sr26_2" }, { "id": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "FrameworkClause", "label": "\u00a7V (Validation and Monitoring)", "framework": "sr26_2" }, { "id": "clause:sr26_2:\u00a7V + \u00a7VI", "type": "FrameworkClause", "label": "\u00a7V + \u00a7VI", "framework": "sr26_2" }, { "id": "clause:sr26_2:\u00a7VI (Documentation)", "type": "FrameworkClause", "label": "\u00a7VI (Documentation)", "framework": "sr26_2" }, { "id": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "FrameworkClause", "label": "\u00a7VI (Governance and Controls)", "framework": "sr26_2" }, { "id": "clause:sr26_2:\u00a7VI (Model Inventory)", "type": "FrameworkClause", "label": "\u00a7VI (Model Inventory)", "framework": "sr26_2" }, { "id": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "FrameworkClause", "label": "\u00a7VI (Roles and Responsibilities)", "framework": "sr26_2" }, { "id": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "FrameworkClause", "label": "\u00a7VII (Vendor and Third-Party)", "framework": "sr26_2" }, { "id": "clause:sr262:Sec. IV", "type": "FrameworkClause", "label": "Sec. IV", "framework": "sr262" }, { "id": "clause:sr262:Sec. V", "type": "FrameworkClause", "label": "Sec. V", "framework": "sr262" }, { "id": "clause:sr262:Sec. VI", "type": "FrameworkClause", "label": "Sec. VI", "framework": "sr262" }, { "id": "clause:sr262:Sec. VII", "type": "FrameworkClause", "label": "Sec. VII", "framework": "sr262" }, { "id": "clause:uk_duaa:access rights provisions", "type": "FrameworkClause", "label": "access rights provisions", "framework": "uk_duaa" }, { "id": "clause:uk_duaa:automated decision rights", "type": "FrameworkClause", "label": "automated decision rights", "framework": "uk_duaa" }, { "id": "clause:uk_duaa:children provisions", "type": "FrameworkClause", "label": "children provisions", "framework": "uk_duaa" }, { "id": "clause:uk_duaa:Data protection complaints procedure", "type": "FrameworkClause", "label": "Data protection complaints procedure", "framework": "uk_duaa" }, { "id": "clause:uk_duaa:international transfer provisions", "type": "FrameworkClause", "label": "international transfer provisions", "framework": "uk_duaa" }, { "id": "clause:uk_duaa:TIA equivalent", "type": "FrameworkClause", "label": "TIA equivalent", "framework": "uk_duaa" }, { "id": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "FrameworkClause", "label": "\u00b613\u2013\u00b624 (Values)", "framework": "un_ethics_ai" }, { "id": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "FrameworkClause", "label": "\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "framework": "un_ethics_ai" }, { "id": "clause:un_ethics_ai:\u00b635\u2013\u00b636 (Human oversight and determination)", "type": "FrameworkClause", "label": "\u00b635\u2013\u00b636 (Human oversight and determination)", "framework": "un_ethics_ai" }, { "id": "clause:un_ethics_ai:\u00b637 (Transparency)", "type": "FrameworkClause", "label": "\u00b637 (Transparency)", "framework": "un_ethics_ai" }, { "id": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "FrameworkClause", "label": "\u00b637\u2013\u00b641 (Transparency and explainability)", "framework": "un_ethics_ai" }, { "id": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "FrameworkClause", "label": "\u00b647 (Multi-stakeholder and adaptive governance)", "framework": "un_ethics_ai" }, { "id": "clause:w3c_did:\u00a74", "type": "FrameworkClause", "label": "\u00a74", "framework": "w3c_did" }, { "id": "clause:w3c_did:\u00a75", "type": "FrameworkClause", "label": "\u00a75", "framework": "w3c_did" }, { "id": "clause:w3c_did:\u00a75.3", "type": "FrameworkClause", "label": "\u00a75.3", "framework": "w3c_did" }, { "id": "clause:w3c_prov:\u00a72", "type": "FrameworkClause", "label": "\u00a72", "framework": "w3c_prov" }, { "id": "clause:w3c_prov:\u00a75", "type": "FrameworkClause", "label": "\u00a75", "framework": "w3c_prov" }, { "id": "clause:w3c_prov:\u00a75.1.4", "type": "FrameworkClause", "label": "\u00a75.1.4", "framework": "w3c_prov" }, { "id": "clause:w3c_prov:\u00a75.2", "type": "FrameworkClause", "label": "\u00a75.2", "framework": "w3c_prov" }, { "id": "clause:w3c_prov:\u00a75.2.2", "type": "FrameworkClause", "label": "\u00a75.2.2", "framework": "w3c_prov" }, { "id": "clause:w3c_prov:\u00a75.3.2", "type": "FrameworkClause", "label": "\u00a75.3.2", "framework": "w3c_prov" }, { "id": "clause:w3c_prov:\u00a75.4", "type": "FrameworkClause", "label": "\u00a75.4", "framework": "w3c_prov" }, { "id": "lens:board_governance", "type": "Lens", "label": "board_governance" }, { "id": "lens:business_stakeholder", "type": "Lens", "label": "business_stakeholder" }, { "id": "lens:cfo_procurement", "type": "Lens", "label": "cfo_procurement" }, { "id": "lens:data_governance", "type": "Lens", "label": "data_governance" }, { "id": "lens:data_scientist", "type": "Lens", "label": "data_scientist" }, { "id": "lens:detection", "type": "Lens", "label": "detection" }, { "id": "lens:dpo", "type": "Lens", "label": "dpo" }, { "id": "lens:engineering", "type": "Lens", "label": "engineering" }, { "id": "lens:ethics_officer", "type": "Lens", "label": "ethics_officer" }, { "id": "lens:evaluation", "type": "Lens", "label": "evaluation" }, { "id": "lens:general_counsel", "type": "Lens", "label": "general_counsel" }, { "id": "lens:grc", "type": "Lens", "label": "grc" }, { "id": "lens:grc_auditor", "type": "Lens", "label": "grc_auditor" }, { "id": "lens:iam_engineer", "type": "Lens", "label": "iam_engineer" }, { "id": "lens:it_operations", "type": "Lens", "label": "it_operations" }, { "id": "lens:legal_counsel", "type": "Lens", "label": "legal_counsel" }, { "id": "lens:mlops", "type": "Lens", "label": "mlops" }, { "id": "lens:privacy_engineer", "type": "Lens", "label": "privacy_engineer" }, { "id": "lens:red_team", "type": "Lens", "label": "red_team" }, { "id": "lens:risk_officer", "type": "Lens", "label": "risk_officer" }, { "id": "lens:secops", "type": "Lens", "label": "secops" }, { "id": "lens:security_architect", "type": "Lens", "label": "security_architect" }, { "id": "lens:software_engineering", "type": "Lens", "label": "software_engineering" }, { "id": "source:a2a_spec", "type": "NormativeSource", "label": "A2A Protocol", "source_id": "a2a_spec", "normative_force": "voluntary-standard", "url": "https://github.com/a2aproject/A2A" }, { "id": "source:acc_legal_ops_contract_mgmt", "type": "NormativeSource", "label": "ACC Legal Operations Contract Management Best Practices", "source_id": "acc_legal_ops_contract_mgmt", "normative_force": "best-practice", "url": "https://www.acc.com/legalops" }, { "id": "source:acm_ethics", "type": "NormativeSource", "label": "ACM Code of Ethics 2018", "source_id": "acm_ethics", "normative_force": "voluntary-standard", "url": "https://www.acm.org/code-of-ethics" }, { "id": "source:agent_security_bench", "type": "NormativeSource", "label": "Agent Security Bench (ASB)", "source_id": "agent_security_bench", "normative_force": "best-practice", "url": "https://arxiv.org/abs/2410.02644" }, { "id": "source:agentdojo", "type": "NormativeSource", "label": "AgentDojo", "source_id": "agentdojo", "normative_force": "best-practice", "url": "https://github.com/ethz-spylab/agentdojo" }, { "id": "source:aicpa-soc2", "type": "NormativeSource", "label": "AICPA SOC 2 Trust Services Criteria", "source_id": "aicpa-soc2", "normative_force": "certification-standard", "url": "https://www.aicpa-cima.com/resources/download/2017-trust-services-criteria-with-revised-points-of-focus-2022" }, { "id": "source:anthropic_attack_navigator", "type": "NormativeSource", "label": "Anthropic LLM ATT&CK Navigator", "source_id": "anthropic_attack_navigator", "normative_force": "best-practice", "url": "https://www.anthropic.com/research/attack-navigator" }, { "id": "source:anthropic_glasswing", "type": "NormativeSource", "label": "Project Glasswing", "source_id": "anthropic_glasswing", "normative_force": "best-practice", "url": "https://www.anthropic.com/glasswing" }, { "id": "source:anthropic_gtg1002", "type": "NormativeSource", "label": "Anthropic GTG-1002 Report", "source_id": "anthropic_gtg1002", "normative_force": "best-practice", "url": "https://www.anthropic.com/news/disrupting-AI-espionage" }, { "id": "source:anthropic_mcp", "type": "NormativeSource", "label": "Model Context Protocol", "source_id": "anthropic_mcp", "normative_force": "voluntary-standard", "url": "https://modelcontextprotocol.io/specification/2025-11-25" }, { "id": "source:anthropic_privacy", "type": "NormativeSource", "label": "Anthropic privacy & data handling", "source_id": "anthropic_privacy", "normative_force": "best-practice", "url": "https://www.anthropic.com/legal/privacy" }, { "id": "source:anthropic_privacy_policy_2024", "type": "NormativeSource", "label": "Anthropic Privacy Policy & Zero Data Retention Addendum", "source_id": "anthropic_privacy_policy_2024", "normative_force": "best-practice", "url": "https://www.anthropic.com/legal/privacy" }, { "id": "source:anthropic_rsp", "type": "NormativeSource", "label": "Anthropic Responsible Scaling Policy v3.3", "source_id": "anthropic_rsp", "normative_force": "best-practice", "url": "https://www.anthropic.com/responsible-scaling-policy" }, { "id": "source:anthropic_transparency", "type": "NormativeSource", "label": "Anthropic Model Card & Knowledge Transparency", "source_id": "anthropic_transparency", "normative_force": "best-practice", "url": "https://www.anthropic.com/transparency" }, { "id": "source:anthropic_zt_agents", "type": "NormativeSource", "label": "Zero Trust for AI Agents", "source_id": "anthropic_zt_agents", "normative_force": "best-practice", "url": "input/anthropic-zero-trust-ai-agents-2026.pdf (Anthropic eBook, 2026-05-18; public eBook URL not embedded in the artifact)" }, { "id": "source:auth0_genai", "type": "NormativeSource", "label": "Auth0 for AI Agents", "source_id": "auth0_genai", "normative_force": "best-practice", "url": "https://auth0.com/ai/docs" }, { "id": "source:aws_artifact", "type": "NormativeSource", "label": "AWS Artifact compliance reports", "source_id": "aws_artifact", "normative_force": "best-practice", "url": "https://aws.amazon.com/artifact/" }, { "id": "source:aws_artifact_compliance_2024", "type": "NormativeSource", "label": "AWS Artifact (Compliance Reports)", "source_id": "aws_artifact_compliance_2024", "normative_force": "best-practice", "url": "https://aws.amazon.com/artifact/" }, { "id": "source:aws_bedrock_guardrails", "type": "NormativeSource", "label": "AWS Bedrock Guardrails", "source_id": "aws_bedrock_guardrails", "normative_force": "best-practice", "url": "https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails.html" }, { "id": "source:aws_bedrock_guardrails_2024", "type": "NormativeSource", "label": "Amazon Bedrock Guardrails", "source_id": "aws_bedrock_guardrails_2024", "normative_force": "best-practice", "url": "https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails.html" }, { "id": "source:aws_bedrock_kb", "type": "NormativeSource", "label": "AWS Bedrock Knowledge Bases", "source_id": "aws_bedrock_kb", "normative_force": "best-practice", "url": "https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-base.html" }, { "id": "source:aws_bedrock_knowledge_bases_2024", "type": "NormativeSource", "label": "Amazon Bedrock Knowledge Bases", "source_id": "aws_bedrock_knowledge_bases_2024", "normative_force": "best-practice", "url": "https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-base.html" }, { "id": "source:aws_egress_domains", "type": "NormativeSource", "label": "AWS Egress Domain Controls for AI Agents", "source_id": "aws_egress_domains", "normative_force": "best-practice", "url": "https://aws.amazon.com/blogs/machine-learning/control-which-domains-your-ai-agents-can-access/" }, { "id": "source:aws_financial", "type": "NormativeSource", "label": "AWS financial-services controls guidance", "source_id": "aws_financial", "normative_force": "best-practice", "url": "https://aws.amazon.com/financial-services/" }, { "id": "source:aws_financial_services_compliance_2024", "type": "NormativeSource", "label": "AWS User Guide to Financial Services Regulations & Guidelines in the United States", "source_id": "aws_financial_services_compliance_2024", "normative_force": "best-practice", "url": "https://aws.amazon.com/financial-services/security-compliance/" }, { "id": "source:aws_iam", "type": "NormativeSource", "label": "AWS Identity and Access Management guidance", "source_id": "aws_iam", "normative_force": "best-practice", "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/" }, { "id": "source:aws_lake_formation", "type": "NormativeSource", "label": "AWS Lake Formation data governance", "source_id": "aws_lake_formation", "normative_force": "best-practice", "url": "https://docs.aws.amazon.com/lake-formation/latest/dg/" }, { "id": "source:aws_lake_formation_macie_2024", "type": "NormativeSource", "label": "AWS data governance services (Lake Formation, Macie, Glue, S3)", "source_id": "aws_lake_formation_macie_2024", "normative_force": "best-practice", "url": "https://docs.aws.amazon.com/lake-formation/latest/dg/what-is-lake-formation.html" }, { "id": "source:aws_organizations", "type": "NormativeSource", "label": "AWS Organizations / SCP guidance", "source_id": "aws_organizations", "normative_force": "best-practice", "url": "https://docs.aws.amazon.com/organizations/latest/userguide/" }, { "id": "source:aws_organizations_scp_2024", "type": "NormativeSource", "label": "AWS Organizations: Service Control Policies & Control Tower", "source_id": "aws_organizations_scp_2024", "normative_force": "best-practice", "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html" }, { "id": "source:aws_privacy", "type": "NormativeSource", "label": "AWS data privacy guidance", "source_id": "aws_privacy", "normative_force": "best-practice", "url": "https://aws.amazon.com/compliance/data-privacy/" }, { "id": "source:aws_privacy_data_governance_2024", "type": "NormativeSource", "label": "AWS Data Privacy (Data Privacy Center)", "source_id": "aws_privacy_data_governance_2024", "normative_force": "best-practice", "url": "https://aws.amazon.com/compliance/data-privacy/" }, { "id": "source:aws_reliability", "type": "NormativeSource", "label": "AWS Well-Architected Reliability Pillar", "source_id": "aws_reliability", "normative_force": "best-practice", "url": "https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/" }, { "id": "source:aws_scoping_matrix", "type": "NormativeSource", "label": "AWS Generative AI Security Scoping Matrix", "source_id": "aws_scoping_matrix", "normative_force": "industry-framework", "url": "https://aws.amazon.com/blogs/security/securing-generative-ai-an-introduction-to-the-generative-ai-security-scoping-matrix/" }, { "id": "source:aws_well_arch_reliability_2024", "type": "NormativeSource", "label": "AWS Well-Architected Reliability Pillar", "source_id": "aws_well_arch_reliability_2024", "normative_force": "best-practice", "url": "https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/welcome.html" }, { "id": "source:aws_well_arch_security_iam_2024", "type": "NormativeSource", "label": "AWS Well-Architected Security Pillar: Identity and Access Management", "source_id": "aws_well_arch_security_iam_2024", "normative_force": "best-practice", "url": "https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/identity-and-access-management.html" }, { "id": "source:bcbs_239", "type": "NormativeSource", "label": "BCBS 239", "source_id": "bcbs_239", "normative_force": "supervisory-guidance", "url": "https://www.bis.org/publ/bcbs239.htm" }, { "id": "source:beyondidentity_ceros", "type": "NormativeSource", "label": "Ceros: Agentic AI Trust Layer", "source_id": "beyondidentity_ceros", "normative_force": "industry-framework", "url": "https://www.ceros.sh/" }, { "id": "source:biml_llm_ara", "type": "NormativeSource", "label": "BIML LLM Risk Analysis", "source_id": "biml_llm_ara", "normative_force": "best-practice", "url": "https://berryvilleiml.com/docs/BIML-LLM24.pdf" }, { "id": "source:biv_skills", "type": "NormativeSource", "label": "BIV: Behavioral Integrity Verification for AI Agent Skills", "source_id": "biv_skills", "normative_force": "best-practice", "url": "https://arxiv.org/abs/2605.11770" }, { "id": "source:bsi_ai_fundamentals", "type": "NormativeSource", "label": "BSI Security of AI-Systems: Fundamentals", "source_id": "bsi_ai_fundamentals", "normative_force": "supervisory-guidance", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/KI/Security-of-AI-systems_fundamentals.pdf" }, { "id": "source:c2pa", "type": "NormativeSource", "label": "C2PA Content Provenance and Authenticity specification", "source_id": "c2pa", "normative_force": "industry-framework", "url": "https://c2pa.org/specifications/" }, { "id": "source:c2pa_spec_2_1", "type": "NormativeSource", "label": "C2PA \u2014 Coalition for Content Provenance and Authenticity Technical Specification 2.1", "source_id": "c2pa_spec_2_1", "normative_force": "best-practice", "url": "https://c2pa.org/specifications/specifications/2.1/specs/C2PA_Specification.html" }, { "id": "source:c2pa_spec_v2", "type": "NormativeSource", "label": "C2PA Technical Specification 2.2", "source_id": "c2pa_spec_v2", "normative_force": "voluntary-standard", "url": "https://spec.c2pa.org/specifications/specifications/2.2/specs/C2PA_Specification.html" }, { "id": "source:ccpa", "type": "NormativeSource", "label": "CCPA/CPRA", "source_id": "ccpa", "normative_force": "regulation", "url": "https://cppa.ca.gov/regulations/" }, { "id": "source:ccpa_cpra_2023", "type": "NormativeSource", "label": "California Consumer Privacy Act (CPRA) + CPPA ADMT Regulations", "source_id": "ccpa_cpra_2023", "normative_force": "binding-law", "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?division=3.&part=4.&lawCode=CIV&title=1.81.5." }, { "id": "source:cfpb_adverse_action_2022", "type": "NormativeSource", "label": "Consumer Financial Protection Circular 2022-03 \u2014 Adverse action notification requirements in connection with credit decisions based on complex algorithms", "source_id": "cfpb_adverse_action_2022", "normative_force": "supervisory-guidance", "url": "https://www.consumerfinance.gov/compliance/circulars/circular-2022-03-adverse-action-notification-requirements-in-connection-with-credit-decisions-based-on-complex-algorithms/" }, { "id": "source:cfpb_ai", "type": "NormativeSource", "label": "CFPB AI Guidance", "source_id": "cfpb_ai", "normative_force": "supervisory-guidance", "url": "https://www.consumerfinance.gov/compliance/supervisory-guidance/" }, { "id": "source:china_pipl_2021", "type": "NormativeSource", "label": "China Personal Information Protection Law (PIPL)", "source_id": "china_pipl_2021", "normative_force": "binding-law", "url": "http://www.npc.gov.cn/npc/c2/c30834/202108/t20210820_313088.html" }, { "id": "source:cis_controls_v8", "type": "NormativeSource", "label": "CIS Controls v8", "source_id": "cis_controls_v8", "normative_force": "industry-framework", "url": "https://www.cisecurity.org/controls/v8" }, { "id": "source:cisa_agentic", "type": "NormativeSource", "label": "CISA: Careful Adoption of Agentic AI Services", "source_id": "cisa_agentic", "normative_force": "supervisory-guidance", "url": "https://www.cisa.gov/resources-tools/resources/careful-adoption-agentic-ai-services" }, { "id": "source:cisa_ai_guidance", "type": "NormativeSource", "label": "CISA AI Roadmap 2023-2024", "source_id": "cisa_ai_guidance", "normative_force": "best-practice", "url": "https://www.cisa.gov/resources-tools/resources/cisa-roadmap-artificial-intelligence" }, { "id": "source:cisa_kev", "type": "NormativeSource", "label": "CISA Known Exploited Vulnerabilities (KEV) Catalog", "source_id": "cisa_kev", "normative_force": "supervisory-guidance", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "id": "source:cisa_sbom_ai", "type": "NormativeSource", "label": "CISA: Software Bill of Materials for AI", "source_id": "cisa_sbom_ai", "normative_force": "supervisory-guidance", "url": "https://www.cisa.gov/resources-tools/resources/software-bill-materials-ai-minimum-elements" }, { "id": "source:cisa_zt", "type": "NormativeSource", "label": "CISA Zero Trust Maturity Model v2.0", "source_id": "cisa_zt", "normative_force": "best-practice", "url": "https://www.cisa.gov/resources-tools/resources/zero-trust-maturity-model" }, { "id": "source:claude_sandbox_bypass", "type": "NormativeSource", "label": "Claude Code Sandbox Bypass Research", "source_id": "claude_sandbox_bypass", "normative_force": "best-practice", "url": "https://ona.com/stories/how-claude-code-escapes-its-own-denylist-and-sandbox" }, { "id": "source:cloudflare_resilience", "type": "NormativeSource", "label": "Cloudflare resilience / availability guidance", "source_id": "cloudflare_resilience", "normative_force": "best-practice", "url": "https://developers.cloudflare.com/" }, { "id": "source:cloudflare_resilience_2024", "type": "NormativeSource", "label": "Cloudflare DDoS Protection", "source_id": "cloudflare_resilience_2024", "normative_force": "best-practice", "url": "https://www.cloudflare.com/ddos/" }, { "id": "source:cnil_ai", "type": "NormativeSource", "label": "CNIL recommendations on AI and data protection", "source_id": "cnil_ai", "normative_force": "supervisory-guidance", "url": "https://www.cnil.fr/en/ai" }, { "id": "source:cnil_ai_guidance_2023", "type": "NormativeSource", "label": "CNIL AI Recommendations \u2014 Use of Artificial Intelligence and Protection of Personal Data", "source_id": "cnil_ai_guidance_2023", "normative_force": "supervisory-guidance", "url": "https://www.cnil.fr/en/topics/artificial-intelligence-ai" }, { "id": "source:co_ai_act", "type": "NormativeSource", "label": "Colorado AI Act SB 26-189", "source_id": "co_ai_act", "normative_force": "binding-law", "url": "https://leg.colorado.gov/" }, { "id": "source:cobit_2019", "type": "NormativeSource", "label": "COBIT 2019", "source_id": "cobit_2019", "normative_force": "industry-framework", "url": "https://www.isaca.org/resources/cobit" }, { "id": "source:cobit_dss04", "type": "NormativeSource", "label": "COBIT DSS04", "source_id": "cobit_dss04", "normative_force": "industry-framework", "url": "https://www.isaca.org/resources/cobit" }, { "id": "source:colorado_sb26_189", "type": "NormativeSource", "label": "Colorado SB 26-189 \u2014 Automated Decision-Making Technology", "source_id": "colorado_sb26_189", "normative_force": "binding-law", "url": "https://leg.colorado.gov/bills/sb26-189" }, { "id": "source:containment_gap", "type": "NormativeSource", "label": "Quantifying LLM Container Sandbox Escape", "source_id": "containment_gap", "normative_force": "best-practice", "url": "https://arxiv.org/abs/2603.02277" }, { "id": "source:cosai_oasis", "type": "NormativeSource", "label": "CoSAI: Coalition for Secure AI", "source_id": "cosai_oasis", "normative_force": "industry-framework", "url": "https://www.coalitionforsecureai.org/" }, { "id": "source:coso_erm", "type": "NormativeSource", "label": "COSO ERM 2017", "source_id": "coso_erm", "normative_force": "best-practice", "url": "https://www.coso.org/guidance-erm" }, { "id": "source:coso_icfr", "type": "NormativeSource", "label": "COSO ICFR 2013", "source_id": "coso_icfr", "normative_force": "best-practice", "url": "https://www.coso.org/Guidance/Pages/Internal-Control.aspx" }, { "id": "source:crowdstrike_aidr", "type": "NormativeSource", "label": "CrowdStrike Falcon AIDR", "source_id": "crowdstrike_aidr", "normative_force": "industry-framework", "url": "https://www.crowdstrike.com/en-us/platform/falcon-aidr-ai-detection-and-response/" }, { "id": "source:csa_agent_survey", "type": "NormativeSource", "label": "CSA: Securing Autonomous AI Agents", "source_id": "csa_agent_survey", "normative_force": "best-practice", "url": "https://cloudsecurityalliance.org/artifacts/securing-autonomous-ai-agents" }, { "id": "source:csa_ai_caiq", "type": "NormativeSource", "label": "CSA AI Consensus Assessment Initiative Questionnaire (AI-CAIQ)", "source_id": "csa_ai_caiq", "normative_force": "industry-framework", "url": "https://cloudsecurityalliance.org/" }, { "id": "source:csa_ai_caiq_v1", "type": "NormativeSource", "label": "CSA AI Controls Matrix (AICM) and AI Consensus Assessments Initiative Questionnaire (AI CAIQ)", "source_id": "csa_ai_caiq_v1", "normative_force": "best-practice", "url": "https://cloudsecurityalliance.org/artifacts/ai-controls-matrix-v1-1" }, { "id": "source:csa_aicm", "type": "NormativeSource", "label": "CSA AI Controls Matrix", "source_id": "csa_aicm", "normative_force": "industry-framework", "url": "https://cloudsecurityalliance.org/artifacts/ai-controls-matrix" }, { "id": "source:csa_aismm", "type": "NormativeSource", "label": "CSA AISMM", "source_id": "csa_aismm", "normative_force": "industry-framework", "url": "https://cloudsecurityalliance.org/artifacts/ai-security-maturity-model" }, { "id": "source:csa_maestro", "type": "NormativeSource", "label": "CSA MAESTRO Framework", "source_id": "csa_maestro", "normative_force": "industry-framework", "url": "https://labs.cloudsecurityalliance.org/maestro/" }, { "id": "source:dama_dmbok", "type": "NormativeSource", "label": "DAMA-DMBOK 2nd Ed", "source_id": "dama_dmbok", "normative_force": "best-practice", "url": "https://www.dama.org/cpages/body-of-knowledge" }, { "id": "source:data_contract_spec", "type": "NormativeSource", "label": "Data Contract Specification", "source_id": "data_contract_spec", "normative_force": "industry-framework", "url": "https://datacontract.com/" }, { "id": "source:data_contract_spec_1_0", "type": "NormativeSource", "label": "Open Data Contract Standard (Bitol ODCS)", "source_id": "data_contract_spec_1_0", "normative_force": "best-practice", "url": "https://github.com/bitol-io/open-data-contract-standard" }, { "id": "source:databricks_dasf3", "type": "NormativeSource", "label": "Databricks DASF v3.0", "source_id": "databricks_dasf3", "normative_force": "industry-framework", "url": "https://www.databricks.com/blog/agentic-ai-security-new-risks-and-controls-databricks-ai-security-framework-dasf-v30" }, { "id": "source:databricks_omnigent_2026", "type": "NormativeSource", "label": "Databricks Omnigent \u2014 Contextual Policies", "source_id": "databricks_omnigent_2026", "normative_force": "best-practice", "url": "https://www.databricks.com/blog/contextual-policies-omnigent-using-session-state-better-govern-ai-agents" }, { "id": "source:databricks_unity", "type": "NormativeSource", "label": "Databricks Unity Catalog governance", "source_id": "databricks_unity", "normative_force": "best-practice", "url": "https://docs.databricks.com/data-governance/unity-catalog/index.html" }, { "id": "source:databricks_unity_catalog_2024", "type": "NormativeSource", "label": "Databricks Unity Catalog", "source_id": "databricks_unity_catalog_2024", "normative_force": "best-practice", "url": "https://docs.databricks.com/en/data-governance/unity-catalog/index.html" }, { "id": "source:dcam", "type": "NormativeSource", "label": "DCAM v2.2", "source_id": "dcam", "normative_force": "industry-framework", "url": "https://edmcouncil.org/frameworks/dcam/" }, { "id": "source:deepmind_agi_safety", "type": "NormativeSource", "label": "DeepMind AGI Safety Technical Approach", "source_id": "deepmind_agi_safety", "normative_force": "best-practice", "url": "https://storage.googleapis.com/deepmind-media/DeepMind.com/Blog/evaluating-potential-cybersecurity-threats-of-advanced-ai/An_Approach_to_Technical_AGI_Safety_Apr_2025.pdf" }, { "id": "source:deepmind_ai_control", "type": "NormativeSource", "label": "AI Control: Improving Safety Despite Intentional Subversion", "source_id": "deepmind_ai_control", "normative_force": "best-practice", "url": "https://arxiv.org/abs/2312.06942" }, { "id": "source:did_vc", "type": "NormativeSource", "label": "W3C DID v1.0 & Verifiable Credentials", "source_id": "did_vc", "normative_force": "voluntary-standard", "url": "https://www.w3.org/TR/did-1.0/" }, { "id": "source:doj_ai", "type": "NormativeSource", "label": "DOJ guidance on AI (civil rights / ADA)", "source_id": "doj_ai", "normative_force": "supervisory-guidance", "url": "https://www.justice.gov/" }, { "id": "source:doj_ai_guidance_2023", "type": "NormativeSource", "label": "DOJ \u2014 Algorithms, Artificial Intelligence, and Disability Discrimination in Hiring", "source_id": "doj_ai_guidance_2023", "normative_force": "supervisory-guidance", "url": "https://www.ada.gov/resources/ai-guidance/" }, { "id": "source:dora", "type": "NormativeSource", "label": "EU DORA", "source_id": "dora", "normative_force": "binding-law", "url": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj" }, { "id": "source:dpdp", "type": "NormativeSource", "label": "India DPDP Act 2023", "source_id": "dpdp", "normative_force": "binding-law", "url": "https://www.meity.gov.in/data-protection-framework" }, { "id": "source:eba_gl_2020_06", "type": "NormativeSource", "label": "EBA GL/2020/06", "source_id": "eba_gl_2020_06", "normative_force": "supervisory-guidance", "url": "https://www.eba.europa.eu/regulation-and-policy/internal-governance/guidelines-on-ict-and-security-risk-management" }, { "id": "source:ecoa", "type": "NormativeSource", "label": "ECOA + Regulation B", "source_id": "ecoa", "normative_force": "binding-law", "url": "https://www.consumerfinance.gov/rules-policy/regulations/1002/" }, { "id": "source:edpb_opinion_28_2024", "type": "NormativeSource", "label": "EDPB Opinion 28/2024", "source_id": "edpb_opinion_28_2024", "normative_force": "supervisory-guidance", "url": "https://www.edpb.europa.eu/documents/opinion-of-the-board-art-64/opinion-282024-on-certain-data-protection-aspects-related-to_en" }, { "id": "source:eeoc_ai", "type": "NormativeSource", "label": "EEOC guidance on AI and employment discrimination", "source_id": "eeoc_ai", "normative_force": "supervisory-guidance", "url": "https://www.eeoc.gov/" }, { "id": "source:eeoc_ai_hiring_2023", "type": "NormativeSource", "label": "EEOC \u2014 Select Issues: Assessing Adverse Impact in Software, Algorithms, and Artificial Intelligence Used in Employment Selection Procedures Under Title VII", "source_id": "eeoc_ai_hiring_2023", "normative_force": "supervisory-guidance", "url": "https://www.eeoc.gov/laws/guidance/questions-and-answers-clarifying-eeocs-role-addressing-employment-discrimination" }, { "id": "source:eidas2", "type": "NormativeSource", "label": "eIDAS 2.0", "source_id": "eidas2", "normative_force": "binding-law", "url": "https://eur-lex.europa.eu/eli/reg/2024/1183/oj" }, { "id": "source:eidas2_2024_1183", "type": "NormativeSource", "label": "eIDAS 2.0 \u2014 Regulation (EU) 2024/1183", "source_id": "eidas2_2024_1183", "normative_force": "binding-law", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32024R1183" }, { "id": "source:enisa_ai", "type": "NormativeSource", "label": "ENISA guidance on securing AI", "source_id": "enisa_ai", "normative_force": "supervisory-guidance", "url": "https://www.enisa.europa.eu/topics/iot-and-smart-infrastructures/artificial-intelligence" }, { "id": "source:enisa_ai_cybersec_2023", "type": "NormativeSource", "label": "ENISA \u2014 Cybersecurity of AI and Standardisation", "source_id": "enisa_ai_cybersec_2023", "normative_force": "best-practice", "url": "https://www.enisa.europa.eu/publications/cybersecurity-of-ai-and-standardisation" }, { "id": "source:etsi_gr_sai_005", "type": "NormativeSource", "label": "ETSI GR SAI 005", "source_id": "etsi_gr_sai_005", "normative_force": "voluntary-standard", "url": "https://www.etsi.org/deliver/etsi_gr/SAI/001_099/005/01.01.01_60/gr_SAI005v010101p.pdf" }, { "id": "source:eu_ai_act", "type": "NormativeSource", "label": "EU AI Act", "source_id": "eu_ai_act", "normative_force": "binding-law", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng" }, { "id": "source:eu_charter", "type": "NormativeSource", "label": "EU Charter of Fundamental Rights", "source_id": "eu_charter", "normative_force": "binding-law", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:12012P/TXT" }, { "id": "source:eu_data_act", "type": "NormativeSource", "label": "EU Data Act (Regulation (EU) 2023/2854)", "source_id": "eu_data_act", "normative_force": "binding-law", "url": "https://eur-lex.europa.eu/eli/reg/2023/2854/oj" }, { "id": "source:eu_data_act_2023_2854", "type": "NormativeSource", "label": "EU Data Act \u2014 Regulation (EU) 2023/2854", "source_id": "eu_data_act_2023_2854", "normative_force": "binding-law", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32023R2854" }, { "id": "source:eu_data_gov_act", "type": "NormativeSource", "label": "EU Data Governance Act (Regulation (EU) 2022/868)", "source_id": "eu_data_gov_act", "normative_force": "binding-law", "url": "https://eur-lex.europa.eu/eli/reg/2022/868/oj" }, { "id": "source:eu_data_gov_act_2022_868", "type": "NormativeSource", "label": "EU Data Governance Act \u2014 Regulation (EU) 2022/868", "source_id": "eu_data_gov_act_2022_868", "normative_force": "binding-law", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R0868" }, { "id": "source:fair_principles", "type": "NormativeSource", "label": "FAIR Data Principles", "source_id": "fair_principles", "normative_force": "best-practice", "url": "https://www.go-fair.org/fair-principles/" }, { "id": "source:fapi_2_0", "type": "NormativeSource", "label": "FAPI 2.0 Security Profile", "source_id": "fapi_2_0", "normative_force": "voluntary-standard", "url": "https://openid.net/specs/fapi-2_0-security-profile.html" }, { "id": "source:fapi_2_0_security_profile", "type": "NormativeSource", "label": "FAPI 2.0 Security Profile", "source_id": "fapi_2_0_security_profile", "normative_force": "best-practice", "url": "https://openid.net/specs/fapi-2_0-security-profile.html" }, { "id": "source:fcra", "type": "NormativeSource", "label": "FCRA", "source_id": "fcra", "normative_force": "binding-law", "url": "https://www.ftc.gov/legal-library/browse/statutes/fair-credit-reporting-act" }, { "id": "source:fedramp", "type": "NormativeSource", "label": "FedRAMP", "source_id": "fedramp", "normative_force": "supervisory-guidance", "url": "https://www.fedramp.gov/" }, { "id": "source:fedramp_20x", "type": "NormativeSource", "label": "FedRAMP 20x", "source_id": "fedramp_20x", "normative_force": "certification-standard", "url": "https://www.fedramp.gov/" }, { "id": "source:ffiec", "type": "NormativeSource", "label": "FFIEC IT Examination / AI guidance", "source_id": "ffiec", "normative_force": "supervisory-guidance", "url": "https://www.ffiec.gov/" }, { "id": "source:ffiec_it_handbook_da", "type": "NormativeSource", "label": "FFIEC IT Examination Handbook \u2014 Development, Acquisition, and Maintenance", "source_id": "ffiec_it_handbook_da", "normative_force": "supervisory-guidance", "url": "https://ithandbook.ffiec.gov/it-booklets/development-acquisition-and-maintenance/" }, { "id": "source:finra", "type": "NormativeSource", "label": "FINRA guidance on AI in the securities industry", "source_id": "finra", "normative_force": "supervisory-guidance", "url": "https://www.finra.org/" }, { "id": "source:finra_rn_24_09", "type": "NormativeSource", "label": "FINRA Regulatory Notice 24-09 \u2014 Generative AI and Large Language Models", "source_id": "finra_rn_24_09", "normative_force": "supervisory-guidance", "url": "https://www.finra.org/rules-guidance/notices/24-09" }, { "id": "source:firecracker", "type": "NormativeSource", "label": "AWS Firecracker MicroVM", "source_id": "firecracker", "normative_force": "best-practice", "url": "https://firecracker-microvm.github.io/" }, { "id": "source:ftc_ai", "type": "NormativeSource", "label": "FTC guidance and enforcement on AI", "source_id": "ftc_ai", "normative_force": "supervisory-guidance", "url": "https://www.ftc.gov/business-guidance/blog" }, { "id": "source:ftc_ai_bias_2022", "type": "NormativeSource", "label": "FTC \u2014 Aiming for Truth, Fairness, and Equity in Your Company's Use of AI", "source_id": "ftc_ai_bias_2022", "normative_force": "supervisory-guidance", "url": "https://www.ftc.gov/business-guidance/blog/2021/04/aiming-truth-fairness-equity-your-companys-use-ai" }, { "id": "source:garak", "type": "NormativeSource", "label": "Garak LLM Vulnerability Scanner", "source_id": "garak", "normative_force": "best-practice", "url": "https://github.com/NVIDIA/garak" }, { "id": "source:gdm_fsf_v3_1", "type": "NormativeSource", "label": "Frontier Safety Framework v3.1", "source_id": "gdm_fsf_v3_1", "normative_force": "voluntary-standard", "url": "https://storage.googleapis.com/deepmind-media/DeepMind.com/Blog/strengthening-our-frontier-safety-framework/frontier-safety-framework_3-1.pdf" }, { "id": "source:gdpr", "type": "NormativeSource", "label": "GDPR", "source_id": "gdpr", "normative_force": "binding-law", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "source:gitguardian_mcp_secrets", "type": "NormativeSource", "label": "GitGuardian: Secrets in MCP", "source_id": "gitguardian_mcp_secrets", "normative_force": "best-practice", "url": "https://blog.gitguardian.com/a-look-into-the-secrets-of-mcp/" }, { "id": "source:google_ai_principles", "type": "NormativeSource", "label": "Google AI Principles", "source_id": "google_ai_principles", "normative_force": "best-practice", "url": "https://ai.google/responsibility/principles/" }, { "id": "source:google_ai_principles_2023", "type": "NormativeSource", "label": "Google AI Principles", "source_id": "google_ai_principles_2023", "normative_force": "best-practice", "url": "https://ai.google/responsibility/principles/" }, { "id": "source:google_cloud_compliance_2024", "type": "NormativeSource", "label": "Google Cloud Compliance & Assurance", "source_id": "google_cloud_compliance_2024", "normative_force": "best-practice", "url": "https://cloud.google.com/security/compliance" }, { "id": "source:google_cloud_financial_services_ai_2024", "type": "NormativeSource", "label": "Google Cloud Explainable AI", "source_id": "google_cloud_financial_services_ai_2024", "normative_force": "best-practice", "url": "https://cloud.google.com/explainable-ai" }, { "id": "source:google_compliance", "type": "NormativeSource", "label": "Google Cloud compliance resource center", "source_id": "google_compliance", "normative_force": "best-practice", "url": "https://cloud.google.com/security/compliance" }, { "id": "source:google_dataplex", "type": "NormativeSource", "label": "Google Cloud Dataplex governance", "source_id": "google_dataplex", "normative_force": "best-practice", "url": "https://cloud.google.com/dataplex/docs" }, { "id": "source:google_dataplex_bigquery_2024", "type": "NormativeSource", "label": "Google Cloud Dataplex & BigQuery", "source_id": "google_dataplex_bigquery_2024", "normative_force": "best-practice", "url": "https://cloud.google.com/dataplex/docs/introduction" }, { "id": "source:google_financial", "type": "NormativeSource", "label": "Google Cloud financial-services controls guidance", "source_id": "google_financial", "normative_force": "best-practice", "url": "https://cloud.google.com/architecture/framework" }, { "id": "source:google_org_policy", "type": "NormativeSource", "label": "Google Cloud Organization Policy Service", "source_id": "google_org_policy", "normative_force": "best-practice", "url": "https://cloud.google.com/resource-manager/docs/organization-policy/overview" }, { "id": "source:google_org_policy_service_2024", "type": "NormativeSource", "label": "Google Cloud Organization Policy Service", "source_id": "google_org_policy_service_2024", "normative_force": "best-practice", "url": "https://cloud.google.com/resource-manager/docs/organization-policy/overview" }, { "id": "source:google_saif", "type": "NormativeSource", "label": "Google Secure AI Framework (SAIF)", "source_id": "google_saif", "normative_force": "industry-framework", "url": "https://safety.google/cybersecurity-advancements/saif/" }, { "id": "source:google_saif_2023", "type": "NormativeSource", "label": "Google Secure AI Framework (SAIF)", "source_id": "google_saif_2023", "normative_force": "best-practice", "url": "https://saif.google/secure-ai-framework" }, { "id": "source:google_saif2", "type": "NormativeSource", "label": "Google SAIF v2", "source_id": "google_saif2", "normative_force": "industry-framework", "url": "https://saif.google/" }, { "id": "source:google_secure_agents", "type": "NormativeSource", "label": "Google: An Introduction to Secure AI Agents", "source_id": "google_secure_agents", "normative_force": "best-practice", "url": "https://storage.googleapis.com/gweb-research2023-media/pubtools/1018686.pdf" }, { "id": "source:google_sre", "type": "NormativeSource", "label": "Google Site Reliability Engineering practices", "source_id": "google_sre", "normative_force": "best-practice", "url": "https://sre.google/books/" }, { "id": "source:google_sre_workbook_2018", "type": "NormativeSource", "label": "Site Reliability Engineering (SRE Book, 2016)", "source_id": "google_sre_workbook_2018", "normative_force": "best-practice", "url": "https://sre.google/sre-book/table-of-contents/" }, { "id": "source:google_vertex_ai_rag_2024", "type": "NormativeSource", "label": "Google Vertex AI RAG & Grounding", "source_id": "google_vertex_ai_rag_2024", "normative_force": "best-practice", "url": "https://cloud.google.com/vertex-ai/docs/generative-ai/grounding/overview" }, { "id": "source:google_vertex_rag", "type": "NormativeSource", "label": "Google Vertex AI RAG / grounding guidance", "source_id": "google_vertex_rag", "normative_force": "best-practice", "url": "https://cloud.google.com/vertex-ai/generative-ai/docs/grounding/overview" }, { "id": "source:gvisor", "type": "NormativeSource", "label": "gVisor Container Sandbox", "source_id": "gvisor", "normative_force": "best-practice", "url": "https://github.com/google/gvisor" }, { "id": "source:hashicorp_vault_aar_2026", "type": "NormativeSource", "label": "HashiCorp Vault AI Agent Authorization Pattern", "source_id": "hashicorp_vault_aar_2026", "normative_force": "best-practice", "url": "https://www.hashicorp.com/en/blog/advancing-ai-agent-security-in-vault" }, { "id": "source:hipaa", "type": "NormativeSource", "label": "HIPAA", "source_id": "hipaa", "normative_force": "binding-law", "url": "https://www.hhs.gov/hipaa/" }, { "id": "source:ibm_ai_fairness", "type": "NormativeSource", "label": "IBM AI Fairness 360", "source_id": "ibm_ai_fairness", "normative_force": "industry-framework", "url": "https://aif360.res.ibm.com/" }, { "id": "source:ibm_ai_fairness_360_2021", "type": "NormativeSource", "label": "IBM AI Fairness 360 (AIF360)", "source_id": "ibm_ai_fairness_360_2021", "normative_force": "best-practice", "url": "https://github.com/Trusted-AI/AIF360" }, { "id": "source:iec_62443", "type": "NormativeSource", "label": "IEC 62443", "source_id": "iec_62443", "normative_force": "certification-standard", "url": "https://www.iec.ch/homepage" }, { "id": "source:ieee_7000", "type": "NormativeSource", "label": "IEEE 7000:2021", "source_id": "ieee_7000", "normative_force": "voluntary-standard", "url": "https://standards.ieee.org/ieee/7000/6781/" }, { "id": "source:ietf_rfc_6749_oauth2", "type": "NormativeSource", "label": "OAuth 2.0 Authorization Framework (RFC 6749)", "source_id": "ietf_rfc_6749_oauth2", "normative_force": "voluntary-standard", "url": "https://www.rfc-editor.org/rfc/rfc6749" }, { "id": "source:ietf_rfc_9449_dpop", "type": "NormativeSource", "label": "RFC 9449 \u2014 OAuth 2.0 Demonstrating Proof of Possession (DPoP)", "source_id": "ietf_rfc_9449_dpop", "normative_force": "voluntary-standard", "url": "https://www.rfc-editor.org/rfc/rfc9449" }, { "id": "source:imda_mgf", "type": "NormativeSource", "label": "IMDA MGF for Agentic AI", "source_id": "imda_mgf", "normative_force": "supervisory-guidance", "url": "https://www.imda.gov.sg/-/media/imda/files/about/emerging-tech-and-research/artificial-intelligence/mgf-for-agentic-ai.pdf" }, { "id": "source:iso_22301", "type": "NormativeSource", "label": "ISO 22301:2019", "source_id": "iso_22301", "normative_force": "certification-standard", "url": "https://www.iso.org/standard/75106.html" }, { "id": "source:iso_23894", "type": "NormativeSource", "label": "ISO/IEC 23894:2023", "source_id": "iso_23894", "normative_force": "voluntary-standard", "url": "https://www.iso.org/standard/77304.html" }, { "id": "source:iso_24027", "type": "NormativeSource", "label": "ISO/IEC 24027:2021", "source_id": "iso_24027", "normative_force": "voluntary-standard", "url": "https://www.iso.org/standard/77607.html" }, { "id": "source:iso_24760", "type": "NormativeSource", "label": "ISO/IEC 24760 series", "source_id": "iso_24760", "normative_force": "voluntary-standard", "url": "https://www.iso.org/standard/77582.html" }, { "id": "source:iso_27001", "type": "NormativeSource", "label": "ISO/IEC 27001:2022", "source_id": "iso_27001", "normative_force": "certification-standard", "url": "https://www.iso.org/standard/27001" }, { "id": "source:iso_27002", "type": "NormativeSource", "label": "ISO/IEC 27002:2022", "source_id": "iso_27002", "normative_force": "voluntary-standard", "url": "https://www.iso.org/standard/75652.html" }, { "id": "source:iso_27031", "type": "NormativeSource", "label": "ISO/IEC 27031:2025", "source_id": "iso_27031", "normative_force": "voluntary-standard", "url": "https://www.iso.org/obp/ui/en/#iso:std:iso-iec:27031:ed-2:v1:en" }, { "id": "source:iso_27701", "type": "NormativeSource", "label": "ISO/IEC 27701:2019", "source_id": "iso_27701", "normative_force": "certification-standard", "url": "https://www.iso.org/standard/71670.html" }, { "id": "source:iso_29100", "type": "NormativeSource", "label": "ISO/IEC 29100:2011", "source_id": "iso_29100", "normative_force": "voluntary-standard", "url": "https://www.iso.org/standard/45123.html" }, { "id": "source:iso_30401", "type": "NormativeSource", "label": "ISO 30401:2018", "source_id": "iso_30401", "normative_force": "certification-standard", "url": "https://www.iso.org/standard/68683.html" }, { "id": "source:iso_31000", "type": "NormativeSource", "label": "ISO 31000:2018", "source_id": "iso_31000", "normative_force": "voluntary-standard", "url": "https://www.iso.org/standard/65694.html" }, { "id": "source:iso_37301", "type": "NormativeSource", "label": "ISO 37301:2021", "source_id": "iso_37301", "normative_force": "certification-standard", "url": "https://www.iso.org/standard/75080.html" }, { "id": "source:iso_42001", "type": "NormativeSource", "label": "ISO/IEC 42001:2023", "source_id": "iso_42001", "normative_force": "certification-standard", "url": "https://www.iso.org/standard/81230.html" }, { "id": "source:iso_42005_2025", "type": "NormativeSource", "label": "ISO/IEC 42005:2025", "source_id": "iso_42005_2025", "normative_force": "voluntary-standard", "url": "https://www.iso.org/standard/42005" }, { "id": "source:iso_5259", "type": "NormativeSource", "label": "ISO/IEC 5259", "source_id": "iso_5259", "normative_force": "voluntary-standard", "url": "https://www.iso.org/standard/81088.html" }, { "id": "source:iso_5259_1_2024", "type": "NormativeSource", "label": "ISO/IEC 5259-1:2024 \u2014 Data Quality for Analytics and ML \u2014 Part 1", "source_id": "iso_5259_1_2024", "normative_force": "voluntary-standard", "url": "https://www.iso.org/standard/81088.html" }, { "id": "source:iso_8000", "type": "NormativeSource", "label": "ISO 8000 Data Quality", "source_id": "iso_8000", "normative_force": "voluntary-standard", "url": "https://www.iso.org/standard/60805.html" }, { "id": "source:iso_ai_series", "type": "NormativeSource", "label": "ISO/IEC JTC 1/SC 42 AI Standards Series", "source_id": "iso_ai_series", "normative_force": "certification-standard", "url": "https://www.iso.org/committee/6794475.html" }, { "id": "source:itil_4", "type": "NormativeSource", "label": "ITIL 4", "source_id": "itil_4", "normative_force": "industry-framework", "url": "https://www.axelos.com/certifications/itil-service-management/itil-4-foundation" }, { "id": "source:itil4_service_level_mgmt", "type": "NormativeSource", "label": "ITIL 4 \u2014 Service Level Management", "source_id": "itil4_service_level_mgmt", "normative_force": "best-practice", "url": "https://www.axelos.com/certifications/itil-service-management" }, { "id": "source:lgpd", "type": "NormativeSource", "label": "Brazil LGPD", "source_id": "lgpd", "normative_force": "binding-law", "url": "https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm" }, { "id": "source:mcp_authorization", "type": "NormativeSource", "label": "MCP Authorization Specification", "source_id": "mcp_authorization", "normative_force": "voluntary-standard", "url": "https://modelcontextprotocol.io/specification/2025-11-25" }, { "id": "source:meta_llama_rai", "type": "NormativeSource", "label": "Meta Llama Responsible Use Guide", "source_id": "meta_llama_rai", "normative_force": "best-practice", "url": "https://ai.meta.com/llama/responsible-use-guide/" }, { "id": "source:meta_llama_responsible_use_2024", "type": "NormativeSource", "label": "Meta Llama Responsible Use Guide", "source_id": "meta_llama_responsible_use_2024", "normative_force": "best-practice", "url": "https://www.llama.com/responsible-use-guide/" }, { "id": "source:microsoft_azure_ai", "type": "NormativeSource", "label": "Microsoft Azure AI / AI Foundry guidance", "source_id": "microsoft_azure_ai", "normative_force": "best-practice", "url": "https://learn.microsoft.com/en-us/azure/ai-services/" }, { "id": "source:microsoft_azure_ai_search_2024", "type": "NormativeSource", "label": "Microsoft Azure AI Search & Grounding", "source_id": "microsoft_azure_ai_search_2024", "normative_force": "best-practice", "url": "https://learn.microsoft.com/en-us/azure/search/" }, { "id": "source:microsoft_azure_reliability_2024", "type": "NormativeSource", "label": "Microsoft Azure Resiliency & BCDR", "source_id": "microsoft_azure_reliability_2024", "normative_force": "best-practice", "url": "https://learn.microsoft.com/en-us/azure/reliability/overview" }, { "id": "source:microsoft_azure_resil", "type": "NormativeSource", "label": "Microsoft Azure resiliency / reliability guidance", "source_id": "microsoft_azure_resil", "normative_force": "best-practice", "url": "https://learn.microsoft.com/en-us/azure/reliability/" }, { "id": "source:microsoft_compliance", "type": "NormativeSource", "label": "Microsoft Purview Compliance guidance", "source_id": "microsoft_compliance", "normative_force": "best-practice", "url": "https://learn.microsoft.com/en-us/purview/" }, { "id": "source:microsoft_purview", "type": "NormativeSource", "label": "Microsoft Purview data governance", "source_id": "microsoft_purview", "normative_force": "best-practice", "url": "https://learn.microsoft.com/en-us/purview/" }, { "id": "source:microsoft_purview_compliance_2024", "type": "NormativeSource", "label": "Microsoft Purview Compliance Manager", "source_id": "microsoft_purview_compliance_2024", "normative_force": "best-practice", "url": "https://learn.microsoft.com/en-us/purview/compliance-manager" }, { "id": "source:microsoft_purview_data_governance_2024", "type": "NormativeSource", "label": "Microsoft Purview (Data Governance)", "source_id": "microsoft_purview_data_governance_2024", "normative_force": "best-practice", "url": "https://learn.microsoft.com/en-us/purview/purview" }, { "id": "source:microsoft_rai", "type": "NormativeSource", "label": "Microsoft Responsible AI Standard", "source_id": "microsoft_rai", "normative_force": "industry-framework", "url": "https://www.microsoft.com/en-us/ai/responsible-ai" }, { "id": "source:microsoft_rai_standard_v2_2022", "type": "NormativeSource", "label": "Microsoft Responsible AI Standard v2", "source_id": "microsoft_rai_standard_v2_2022", "normative_force": "best-practice", "url": "https://www.microsoft.com/en-us/ai/responsible-ai" }, { "id": "source:mitchell_2019", "type": "NormativeSource", "label": "Model Cards for Model Reporting", "source_id": "mitchell_2019", "normative_force": "best-practice", "url": "https://arxiv.org/abs/1810.03993" }, { "id": "source:mitre_atlas", "type": "NormativeSource", "label": "MITRE ATLAS", "source_id": "mitre_atlas", "normative_force": "industry-framework", "url": "https://atlas.mitre.org/" }, { "id": "source:mitre_attack", "type": "NormativeSource", "label": "MITRE ATT&CK", "source_id": "mitre_attack", "normative_force": "industry-framework", "url": "https://attack.mitre.org/" }, { "id": "source:ms_agent_governance_toolkit", "type": "NormativeSource", "label": "Microsoft Agent Governance Toolkit", "source_id": "ms_agent_governance_toolkit", "normative_force": "industry-framework", "url": "https://github.com/microsoft/agent-governance-toolkit" }, { "id": "source:ms_copilot_studio_governance", "type": "NormativeSource", "label": "Microsoft Copilot Studio Security and Governance", "source_id": "ms_copilot_studio_governance", "normative_force": "industry-framework", "url": "https://learn.microsoft.com/en-us/microsoft-copilot-studio/security-and-governance" }, { "id": "source:ms_entra_agent_id", "type": "NormativeSource", "label": "Microsoft Entra Agent ID", "source_id": "ms_entra_agent_id", "normative_force": "industry-framework", "url": "https://learn.microsoft.com/en-us/entra/agent-id/" }, { "id": "source:ms_failure_taxonomy", "type": "NormativeSource", "label": "Taxonomy of Failure Modes in Agentic AI Systems", "source_id": "ms_failure_taxonomy", "normative_force": "best-practice", "url": "https://www.microsoft.com/en-us/security/blog/2026/06/04/updating-taxonomy-failure-modes-agentic-ai-systems-year-red-teaming-taught-us/" }, { "id": "source:ms_ifc_agents", "type": "NormativeSource", "label": "Information-flow control: Moving toward secure, autonomous agents", "source_id": "ms_ifc_agents", "normative_force": "best-practice", "url": "https://commandline.microsoft.com/information-flow-control-moving-toward-secure-autonomous-agents/" }, { "id": "source:ms_mxc", "type": "NormativeSource", "label": "Microsoft Execution Containers (MXC)", "source_id": "ms_mxc", "normative_force": "best-practice", "url": "https://github.com/microsoft/mxc" }, { "id": "source:ms_pyrit", "type": "NormativeSource", "label": "Microsoft PyRIT", "source_id": "ms_pyrit", "normative_force": "best-practice", "url": "https://github.com/microsoft/PyRIT" }, { "id": "source:ncsc_cisa_secure_ai_2023", "type": "NormativeSource", "label": "NCSC/CISA Secure AI Dev Guidelines", "source_id": "ncsc_cisa_secure_ai_2023", "normative_force": "supervisory-guidance", "url": "https://www.ncsc.gov.uk/files/Guidelines-for-secure-AI-system-development.pdf" }, { "id": "source:ngac", "type": "NormativeSource", "label": "INCITS 565: Next Generation Access Control (NGAC)", "source_id": "ngac", "normative_force": "voluntary-standard", "url": "https://www.nist.gov/identity-access-management/policy-machine-and-next-generation-access-control" }, { "id": "source:nis2", "type": "NormativeSource", "label": "EU NIS2 Directive", "source_id": "nis2", "normative_force": "directive-transposed-nationally", "url": "https://eur-lex.europa.eu/eli/dir/2022/2555/oj" }, { "id": "source:nist_800_160_v2", "type": "NormativeSource", "label": "NIST SP 800-160 Vol 2", "source_id": "nist_800_160_v2", "normative_force": "voluntary-standard", "url": "https://doi.org/10.6028/NIST.SP.800-160v2r1" }, { "id": "source:nist_800_53", "type": "NormativeSource", "label": "NIST SP 800-53 Rev 5", "source_id": "nist_800_53", "normative_force": "voluntary-standard", "url": "https://doi.org/10.6028/NIST.SP.800-53r5" }, { "id": "source:nist_800_63", "type": "NormativeSource", "label": "NIST SP 800-63-4", "source_id": "nist_800_63", "normative_force": "voluntary-standard", "url": "https://doi.org/10.6028/NIST.SP.800-63-4" }, { "id": "source:nist_ai_100_2", "type": "NormativeSource", "label": "NIST AI 100-2e2025", "source_id": "nist_ai_100_2", "normative_force": "informative-reference", "url": "https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-2e2025.pdf" }, { "id": "source:nist_ai_100_4", "type": "NormativeSource", "label": "NIST AI 100-4", "source_id": "nist_ai_100_4", "normative_force": "voluntary-standard", "url": "https://www.nist.gov/publications/reducing-risks-posed-synthetic-content-overview-technical-approaches-digital-content" }, { "id": "source:nist_ai_600_1", "type": "NormativeSource", "label": "NIST AI 600-1", "source_id": "nist_ai_600_1", "normative_force": "voluntary-standard", "url": "https://doi.org/10.6028/NIST.AI.600-1" }, { "id": "source:nist_ai_rmf_playbook", "type": "NormativeSource", "label": "NIST AI RMF Playbook", "source_id": "nist_ai_rmf_playbook", "normative_force": "supervisory-guidance", "url": "https://airc.nist.gov/airmf-resources/playbook/" }, { "id": "source:nist_caisi", "type": "NormativeSource", "label": "NIST CAISI", "source_id": "nist_caisi", "normative_force": "supervisory-guidance", "url": "https://www.nist.gov/caisi" }, { "id": "source:nist_cosais", "type": "NormativeSource", "label": "NIST COSAiS", "source_id": "nist_cosais", "normative_force": "supervisory-guidance", "url": "https://csrc.nist.gov/projects/cosais" }, { "id": "source:nist_csf", "type": "NormativeSource", "label": "NIST CSF 2.0", "source_id": "nist_csf", "normative_force": "voluntary-standard", "url": "https://doi.org/10.6028/NIST.CSWP.29" }, { "id": "source:nist_nccoe_agent_id", "type": "NormativeSource", "label": "NIST NCCoE AI Agent Identity", "source_id": "nist_nccoe_agent_id", "normative_force": "supervisory-guidance", "url": "https://csrc.nist.gov/pubs/other/2026/02/05/accelerating-the-adoption-of-software-and-ai-agent/ipd" }, { "id": "source:nist_pf", "type": "NormativeSource", "label": "NIST Privacy Framework 1.0", "source_id": "nist_pf", "normative_force": "voluntary-standard", "url": "https://www.nist.gov/privacy-framework" }, { "id": "source:nist_rmf", "type": "NormativeSource", "label": "NIST AI RMF 1.0", "source_id": "nist_rmf", "normative_force": "voluntary-standard", "url": "https://doi.org/10.6028/NIST.AI.100-1" }, { "id": "source:nist_sp800_188", "type": "NormativeSource", "label": "NIST SP 800-188", "source_id": "nist_sp800_188", "normative_force": "voluntary-standard", "url": "https://doi.org/10.6028/NIST.SP.800-188" }, { "id": "source:nist_sp800_34", "type": "NormativeSource", "label": "NIST SP 800-34 Rev 1", "source_id": "nist_sp800_34", "normative_force": "voluntary-standard", "url": "https://doi.org/10.6028/NIST.SP.800-34r1" }, { "id": "source:nist_zt", "type": "NormativeSource", "label": "NIST SP 800-207", "source_id": "nist_zt", "normative_force": "voluntary-standard", "url": "https://doi.org/10.6028/NIST.SP.800-207" }, { "id": "source:nyc_ll144", "type": "NormativeSource", "label": "NYC Local Law 144", "source_id": "nyc_ll144", "normative_force": "regulation", "url": "https://www.nyc.gov/site/dca/about/automated-employment-decision-tools.page" }, { "id": "source:nyc_ll144_2021", "type": "NormativeSource", "label": "NYC Local Law 144 \u2014 Automated Employment Decision Tools", "source_id": "nyc_ll144_2021", "normative_force": "binding-law", "url": "https://legistar.council.nyc.gov/LegislationDetail.aspx?ID=4344524" }, { "id": "source:oauth_bcp", "type": "NormativeSource", "label": "OAuth 2.0 Security Best Current Practice", "source_id": "oauth_bcp", "normative_force": "voluntary-standard", "url": "https://datatracker.ietf.org/doc/draft-ietf-oauth-security-topics/" }, { "id": "source:oauth21", "type": "NormativeSource", "label": "OAuth 2.1", "source_id": "oauth21", "normative_force": "voluntary-standard", "url": "https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/" }, { "id": "source:occ_2024_7", "type": "NormativeSource", "label": "OCC Comptroller's Handbook \u2014 Model Risk Management", "source_id": "occ_2024_7", "normative_force": "supervisory-guidance", "url": "https://www.occ.gov/publications-and-resources/publications/comptrollers-handbook/files/model-risk-management/index-model-risk-management.html" }, { "id": "source:occ_ai", "type": "NormativeSource", "label": "OCC Model Risk Management / AI supervisory guidance", "source_id": "occ_ai", "normative_force": "supervisory-guidance", "url": "https://www.occ.gov/" }, { "id": "source:oecd_ai_principles", "type": "NormativeSource", "label": "OECD AI Principles", "source_id": "oecd_ai_principles", "normative_force": "voluntary-standard", "url": "https://oecd.ai/en/ai-principles" }, { "id": "source:oecd_cg", "type": "NormativeSource", "label": "G20/OECD Principles of Corporate Governance 2023", "source_id": "oecd_cg", "normative_force": "voluntary-standard", "url": "https://www.oecd.org/en/publications/2023/09/g20-oecd-principles-of-corporate-governance-2023_60836fcb.html" }, { "id": "source:oidc_ciba", "type": "NormativeSource", "label": "OpenID Connect CIBA", "source_id": "oidc_ciba", "normative_force": "voluntary-standard", "url": "https://openid.net/specs/openid-client-initiated-backchannel-authentication-core-1_0.html" }, { "id": "source:oidc_federation", "type": "NormativeSource", "label": "OpenID Connect Federation 1.0", "source_id": "oidc_federation", "normative_force": "voluntary-standard", "url": "https://openid.net/specs/openid-federation-1_0.html" }, { "id": "source:oidc_federation_1_0", "type": "NormativeSource", "label": "OpenID Federation 1.0", "source_id": "oidc_federation_1_0", "normative_force": "best-practice", "url": "https://openid.net/specs/openid-federation-1_0.html" }, { "id": "source:okta_authz", "type": "NormativeSource", "label": "Okta authorization (FGA / OAuth) guidance", "source_id": "okta_authz", "normative_force": "best-practice", "url": "https://developer.okta.com/docs/guides/" }, { "id": "source:okta_authz_server_2025", "type": "NormativeSource", "label": "Okta Authorization Servers & Fine-Grained Authorization", "source_id": "okta_authz_server_2025", "normative_force": "best-practice", "url": "https://developer.okta.com/docs/concepts/auth-servers/" }, { "id": "source:okta_cross_app_access", "type": "NormativeSource", "label": "Okta Cross App Access (XAA)", "source_id": "okta_cross_app_access", "normative_force": "industry-framework", "url": "https://www.okta.com/solutions/cross-app-access/" }, { "id": "source:okta_financial", "type": "NormativeSource", "label": "Okta guidance for financial-services identity", "source_id": "okta_financial", "normative_force": "best-practice", "url": "https://www.okta.com/" }, { "id": "source:okta_financial_services_access_2025", "type": "NormativeSource", "label": "Okta for Financial Services", "source_id": "okta_financial_services_access_2025", "normative_force": "best-practice", "url": "https://www.okta.com/solutions/financial-services/" }, { "id": "source:okta_governance", "type": "NormativeSource", "label": "Okta Identity Governance", "source_id": "okta_governance", "normative_force": "best-practice", "url": "https://www.okta.com/products/identity-governance/" }, { "id": "source:okta_iam", "type": "NormativeSource", "label": "Okta identity & access management guidance", "source_id": "okta_iam", "normative_force": "best-practice", "url": "https://developer.okta.com/docs/" }, { "id": "source:okta_identity_governance_2025", "type": "NormativeSource", "label": "Okta Identity Governance", "source_id": "okta_identity_governance_2025", "normative_force": "best-practice", "url": "https://www.okta.com/products/identity-governance/" }, { "id": "source:okta_nhi_agent_identity_2025", "type": "NormativeSource", "label": "Secure and Govern Non-Human Identities (NHIs) at Scale", "source_id": "okta_nhi_agent_identity_2025", "normative_force": "best-practice", "url": "https://www.okta.com/solutions/protect-non-human-identities/" }, { "id": "source:omb_a_123", "type": "NormativeSource", "label": "OMB Circular A-123", "source_id": "omb_a_123", "normative_force": "supervisory-guidance", "url": "https://www.whitehouse.gov/wp-content/uploads/legacy_drupal_files/omb/circulars/A123/a123_rev.pdf" }, { "id": "source:opa_rego", "type": "NormativeSource", "label": "Open Policy Agent (OPA) / Rego policy language", "source_id": "opa_rego", "normative_force": "best-practice", "url": "https://www.openpolicyagent.org/docs/latest/" }, { "id": "source:opa_rego_docs_2024", "type": "NormativeSource", "label": "Open Policy Agent \u2014 Policy Language and Documentation", "source_id": "opa_rego_docs_2024", "normative_force": "best-practice", "url": "https://www.openpolicyagent.org/docs/" }, { "id": "source:openai_agent_builder_safety", "type": "NormativeSource", "label": "OpenAI Agent Builder Safety", "source_id": "openai_agent_builder_safety", "normative_force": "best-practice", "url": "https://platform.openai.com/docs/guides/agent-builder-safety" }, { "id": "source:openai_bug_bounty", "type": "NormativeSource", "label": "OpenAI Bug Bounty Program", "source_id": "openai_bug_bounty", "normative_force": "best-practice", "url": "https://openai.com/index/bug-bounty-program/" }, { "id": "source:openai_enterprise", "type": "NormativeSource", "label": "OpenAI Enterprise privacy & security", "source_id": "openai_enterprise", "normative_force": "best-practice", "url": "https://openai.com/enterprise-privacy/" }, { "id": "source:openai_enterprise_policies_2024", "type": "NormativeSource", "label": "OpenAI Enterprise Privacy", "source_id": "openai_enterprise_policies_2024", "normative_force": "best-practice", "url": "https://openai.com/enterprise-privacy/" }, { "id": "source:openai_governing_agentic", "type": "NormativeSource", "label": "OpenAI Practices for Governing Agentic AI", "source_id": "openai_governing_agentic", "normative_force": "best-practice", "url": "https://cdn.openai.com/papers/practices-for-governing-agentic-ai-systems.pdf" }, { "id": "source:openai_model_spec", "type": "NormativeSource", "label": "OpenAI Model Spec", "source_id": "openai_model_spec", "normative_force": "best-practice", "url": "https://cdn.openai.com/spec/model-spec-2024.html" }, { "id": "source:openai_model_spec_2024", "type": "NormativeSource", "label": "OpenAI Model Specification", "source_id": "openai_model_spec_2024", "normative_force": "best-practice", "url": "https://cdn.openai.com/spec/model-spec-2024-05-08.html" }, { "id": "source:openai_policies", "type": "NormativeSource", "label": "OpenAI usage policies", "source_id": "openai_policies", "normative_force": "best-practice", "url": "https://openai.com/policies/usage-policies/" }, { "id": "source:openai_preparedness", "type": "NormativeSource", "label": "OpenAI Preparedness Framework v2", "source_id": "openai_preparedness", "normative_force": "best-practice", "url": "https://cdn.openai.com/pdf/18a02b5d-6b67-4cec-ab64-68cdfbddebcd/preparedness-framework-v2.pdf" }, { "id": "source:openai_preparedness_v2", "type": "NormativeSource", "label": "OpenAI Preparedness Framework v2", "source_id": "openai_preparedness_v2", "normative_force": "industry-framework", "url": "https://openai.com/index/updating-our-preparedness-framework/" }, { "id": "source:openai_privacy", "type": "NormativeSource", "label": "OpenAI privacy policy / data controls", "source_id": "openai_privacy", "normative_force": "best-practice", "url": "https://openai.com/policies/privacy-policy/" }, { "id": "source:openai_privacy_dpa_2024", "type": "NormativeSource", "label": "OpenAI Privacy Policy & Data Processing Addendum", "source_id": "openai_privacy_dpa_2024", "normative_force": "best-practice", "url": "https://openai.com/policies/privacy-policy" }, { "id": "source:openai_sf", "type": "NormativeSource", "label": "OpenAI safety / preparedness practices", "source_id": "openai_sf", "normative_force": "best-practice", "url": "https://openai.com/safety/" }, { "id": "source:openai_system_cards_2024", "type": "NormativeSource", "label": "OpenAI System Cards & Transparency", "source_id": "openai_system_cards_2024", "normative_force": "best-practice", "url": "https://openai.com/index/gpt-4-system-card/" }, { "id": "source:openai_transparency", "type": "NormativeSource", "label": "OpenAI transparency / usage reporting", "source_id": "openai_transparency", "normative_force": "best-practice", "url": "https://openai.com/policies/" }, { "id": "source:openapi", "type": "NormativeSource", "label": "OpenAPI 3.1", "source_id": "openapi", "normative_force": "voluntary-standard", "url": "https://spec.openapis.org/oas/v3.1.0" }, { "id": "source:opencre", "type": "NormativeSource", "label": "OpenCRE", "source_id": "opencre", "normative_force": "industry-framework", "url": "https://www.opencre.org/" }, { "id": "source:openid", "type": "NormativeSource", "label": "OpenID Connect + OAuth 2.0 + RFC 9396", "source_id": "openid", "normative_force": "voluntary-standard", "url": "https://www.rfc-editor.org/rfc/rfc9396" }, { "id": "source:openid_connect_core_1_0", "type": "NormativeSource", "label": "OpenID Connect Core 1.0", "source_id": "openid_connect_core_1_0", "normative_force": "voluntary-standard", "url": "https://openid.net/specs/openid-connect-core-1_0.html" }, { "id": "source:openlineage", "type": "NormativeSource", "label": "OpenLineage data-lineage specification", "source_id": "openlineage", "normative_force": "industry-framework", "url": "https://openlineage.io/docs/" }, { "id": "source:openlineage_spec_1_0", "type": "NormativeSource", "label": "OpenLineage \u2014 Open Standard for Data Lineage", "source_id": "openlineage_spec_1_0", "normative_force": "best-practice", "url": "https://openlineage.io/" }, { "id": "source:openssf_model_signing", "type": "NormativeSource", "label": "OpenSSF Model Signing v1.0", "source_id": "openssf_model_signing", "normative_force": "industry-framework", "url": "https://github.com/ossf/model-signing-spec" }, { "id": "source:owasp_agentic_threats", "type": "NormativeSource", "label": "OWASP Agentic AI Threats and Mitigations", "source_id": "owasp_agentic_threats", "normative_force": "industry-framework", "url": "https://genai.owasp.org/resource/agentic-ai-threats-and-mitigations/" }, { "id": "source:owasp_ai_exchange", "type": "NormativeSource", "label": "OWASP AI Exchange", "source_id": "owasp_ai_exchange", "normative_force": "industry-framework", "url": "https://owaspai.org/" }, { "id": "source:owasp_ai_testing_guide_v1", "type": "NormativeSource", "label": "OWASP AI Testing Guide v1", "source_id": "owasp_ai_testing_guide_v1", "normative_force": "voluntary-standard", "url": "https://owasp.org/www-project-ai-testing-guide/" }, { "id": "source:owasp_aisvs", "type": "NormativeSource", "label": "OWASP AISVS 1.0", "source_id": "owasp_aisvs", "normative_force": "voluntary-standard", "url": "https://github.com/OWASP/AISVS/tree/main/1.0/en" }, { "id": "source:owasp_aisvs_v1", "type": "NormativeSource", "label": "OWASP AI Security Verification Standard v1.0", "source_id": "owasp_aisvs_v1", "normative_force": "voluntary-standard", "url": "https://github.com/OWASP/AISVS" }, { "id": "source:owasp_aivss", "type": "NormativeSource", "label": "OWASP AIVSS v0.8", "source_id": "owasp_aivss", "normative_force": "industry-framework", "url": "https://aivss.owasp.org/" }, { "id": "source:owasp_asi_2026", "type": "NormativeSource", "label": "OWASP Top 10 for Agentic Applications 2026", "source_id": "owasp_asi_2026", "normative_force": "industry-framework", "url": "https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/" }, { "id": "source:owasp_finbot_ctf", "type": "NormativeSource", "label": "OWASP FinBot CTF", "source_id": "owasp_finbot_ctf", "normative_force": "best-practice", "url": "https://owasp-finbot-ctf.org/" }, { "id": "source:owasp_llm10", "type": "NormativeSource", "label": "OWASP LLM Top 10 2025", "source_id": "owasp_llm10", "normative_force": "industry-framework", "url": "https://genai.owasp.org/llm-top-10/" }, { "id": "source:owasp_ml_top10", "type": "NormativeSource", "label": "OWASP ML Security Top 10", "source_id": "owasp_ml_top10", "normative_force": "industry-framework", "url": "https://owasp.org/www-project-machine-learning-security-top-10/" }, { "id": "source:owasp_nhi_2025", "type": "NormativeSource", "label": "OWASP Non-Human Identities Top 10", "source_id": "owasp_nhi_2025", "normative_force": "industry-framework", "url": "https://owasp.org/www-project-non-human-identities-top-10/2025/" }, { "id": "source:pcaob_as_2201", "type": "NormativeSource", "label": "PCAOB AS 2201", "source_id": "pcaob_as_2201", "normative_force": "certification-standard", "url": "https://pcaobus.org/Standards/Auditing/Pages/AS2201.aspx" }, { "id": "source:ping_identity", "type": "NormativeSource", "label": "Ping Identity access-management guidance", "source_id": "ping_identity", "normative_force": "best-practice", "url": "https://docs.pingidentity.com/" }, { "id": "source:ping_identity_ai", "type": "NormativeSource", "label": "Ping Identity: Identity for AI Guide", "source_id": "ping_identity_ai", "normative_force": "industry-framework", "url": "https://www.pingidentity.com/en-us/docs/assets/4260-ultimate-guide-ai-identity" }, { "id": "source:ping_machine_identity_2026", "type": "NormativeSource", "label": "Ping Identity: Identity for AI", "source_id": "ping_machine_identity_2026", "normative_force": "best-practice", "url": "https://www.pingidentity.com/en/solution/agentic-ai-identity.html" }, { "id": "source:pipeda", "type": "NormativeSource", "label": "Canada PIPEDA", "source_id": "pipeda", "normative_force": "binding-law", "url": "https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/" }, { "id": "source:pipl", "type": "NormativeSource", "label": "Personal Information Protection Law (PIPL)", "source_id": "pipl", "normative_force": "binding-law", "url": "https://www.gov.cn/xinwen/2021-08/20/content_5632486.htm" }, { "id": "source:pisanitizer", "type": "NormativeSource", "label": "PISanitizer", "source_id": "pisanitizer", "normative_force": "best-practice", "url": "https://arxiv.org/abs/2511.10720" }, { "id": "source:plaskett_coding_agent_security", "type": "NormativeSource", "label": "NCC Group: AI Coding Agent Security", "source_id": "plaskett_coding_agent_security", "normative_force": "best-practice", "url": "https://www.nccgroup.com/media/jtepwx1t/nccgroup_codingagentswhitepaper.pdf" }, { "id": "source:plot4ai", "type": "NormativeSource", "label": "PLOT4ai Threat Library", "source_id": "plot4ai", "normative_force": "best-practice", "url": "https://plot4.ai/library" }, { "id": "source:promptfoo", "type": "NormativeSource", "label": "Promptfoo", "source_id": "promptfoo", "normative_force": "best-practice", "url": "https://github.com/promptfoo/promptfoo" }, { "id": "source:quebec_law_25_2021", "type": "NormativeSource", "label": "Quebec Act Respecting the Protection of Personal Information in the Private Sector (Law 25)", "source_id": "quebec_law_25_2021", "normative_force": "binding-law", "url": "https://www.legisquebec.gouv.qc.ca/en/document/cs/P-39.1" }, { "id": "source:quebec_law25", "type": "NormativeSource", "label": "Quebec Law 25 (Act to modernize legislative provisions on the protection of personal information)", "source_id": "quebec_law25", "normative_force": "binding-law", "url": "https://www.legisquebec.gouv.qc.ca/en/document/cs/P-39.1" }, { "id": "source:rfc_9700_oauth_bcp", "type": "NormativeSource", "label": "OAuth 2.0 Security Best Current Practice (RFC 9700)", "source_id": "rfc_9700_oauth_bcp", "normative_force": "best-practice", "url": "https://www.rfc-editor.org/rfc/rfc9700" }, { "id": "source:salesforce_einstein_trust_layer_2024", "type": "NormativeSource", "label": "Salesforce Einstein Trust Layer", "source_id": "salesforce_einstein_trust_layer_2024", "normative_force": "best-practice", "url": "https://help.salesforce.com/s/articleView?id=ai.generative_ai_trust_arch.htm" }, { "id": "source:salesforce_trust", "type": "NormativeSource", "label": "Salesforce Trusted AI / Einstein Trust Layer", "source_id": "salesforce_trust", "normative_force": "best-practice", "url": "https://www.salesforce.com/artificial-intelligence/trusted-ai/" }, { "id": "source:sans_ai_security_guidelines", "type": "NormativeSource", "label": "SANS Critical AI Security Guidelines", "source_id": "sans_ai_security_guidelines", "normative_force": "best-practice", "url": "https://www.sans.org/mlp/critical-ai-security-guidelines/" }, { "id": "source:scim", "type": "NormativeSource", "label": "SCIM 2.0", "source_id": "scim", "normative_force": "voluntary-standard", "url": "https://www.rfc-editor.org/rfc/rfc7644" }, { "id": "source:sec_ai", "type": "NormativeSource", "label": "SEC rules and guidance on AI / predictive analytics", "source_id": "sec_ai", "normative_force": "supervisory-guidance", "url": "https://www.sec.gov/" }, { "id": "source:sec_predictive_analytics_2023", "type": "NormativeSource", "label": "SEC \u2014 Conflicts of Interest Associated with the Use of Predictive Data Analytics by Broker-Dealers and Investment Advisers", "source_id": "sec_predictive_analytics_2023", "normative_force": "informative-reference", "url": "https://www.sec.gov/rules/proposed/2023/34-97990.pdf" }, { "id": "source:sigstore_rekor", "type": "NormativeSource", "label": "Sigstore Rekor \u2014 Immutable Transparency Log", "source_id": "sigstore_rekor", "normative_force": "best-practice", "url": "https://docs.sigstore.dev/logging/overview/" }, { "id": "source:snowflake_horizon", "type": "NormativeSource", "label": "Snowflake Horizon", "source_id": "snowflake_horizon", "normative_force": "best-practice", "url": "https://www.snowflake.com/en/data-cloud/horizon/" }, { "id": "source:soc2", "type": "NormativeSource", "label": "SOC 2 TSC", "source_id": "soc2", "normative_force": "certification-standard", "url": "https://www.aicpa-cima.com/resources/download/2017-trust-services-criteria" }, { "id": "source:sox", "type": "NormativeSource", "label": "Sarbanes-Oxley Act", "source_id": "sox", "normative_force": "binding-law", "url": "https://www.govinfo.gov/content/pkg/PLAW-107publ204/pdf/PLAW-107publ204.pdf" }, { "id": "source:spiffe_spire", "type": "NormativeSource", "label": "SPIFFE/SPIRE", "source_id": "spiffe_spire", "normative_force": "best-practice", "url": "https://spiffe.io/docs/latest/spiffe-about/overview/" }, { "id": "source:sr26_2", "type": "NormativeSource", "label": "Federal Reserve SR 26-2", "source_id": "sr26_2", "normative_force": "supervisory-guidance", "url": "https://www.federalreserve.gov/supervisionreg/srletters/SR2602.htm" }, { "id": "source:uk_duaa", "type": "NormativeSource", "label": "UK Data (Use and Access) Act 2025", "source_id": "uk_duaa", "normative_force": "binding-law", "url": "https://www.legislation.gov.uk/ukpga/2025/18" }, { "id": "source:uk_duaa_2025", "type": "NormativeSource", "label": "Data (Use and Access) Act 2025 (UK DUAA)", "source_id": "uk_duaa_2025", "normative_force": "binding-law", "url": "https://www.legislation.gov.uk/ukpga/2025/18" }, { "id": "source:un_ethics_ai", "type": "NormativeSource", "label": "UNESCO AI Ethics Recommendation", "source_id": "un_ethics_ai", "normative_force": "voluntary-standard", "url": "https://unesdoc.unesco.org/ark:/48223/pf0000381137" }, { "id": "source:w3c_did", "type": "NormativeSource", "label": "W3C DID v1.0", "source_id": "w3c_did", "normative_force": "voluntary-standard", "url": "https://www.w3.org/TR/did-core/" }, { "id": "source:w3c_prov", "type": "NormativeSource", "label": "W3C PROV Data Model", "source_id": "w3c_prov", "normative_force": "voluntary-standard", "url": "https://www.w3.org/TR/prov-dm/" }, { "id": "threat:accountability-gap", "type": "Threat", "label": "accountability-gap", "control_count": 19 }, { "id": "threat:attestation-failure", "type": "Threat", "label": "attestation-failure", "control_count": 6 }, { "id": "threat:attestation-gap", "type": "Threat", "label": "attestation-gap", "control_count": 12 }, { "id": "threat:attestation-unverifiable", "type": "Threat", "label": "attestation-unverifiable", "control_count": 10 }, { "id": "threat:audit-failure", "type": "Threat", "label": "audit-failure", "control_count": 15 }, { "id": "threat:audit-gap", "type": "Threat", "label": "audit-gap", "control_count": 8 }, { "id": "threat:audit-readiness-deficit", "type": "Threat", "label": "audit-readiness-deficit", "control_count": 5 }, { "id": "threat:audit-readiness-failure", "type": "Threat", "label": "audit-readiness-failure", "control_count": 6 }, { "id": "threat:authority-limit-breach", "type": "Threat", "label": "authority-limit-breach", "control_count": 18 }, { "id": "threat:cascading-failure", "type": "Threat", "label": "cascading-failure", "control_count": 4 }, { "id": "threat:commitment-without-authority", "type": "Threat", "label": "commitment-without-authority", "control_count": 7 }, { "id": "threat:compliance-assertion-failure", "type": "Threat", "label": "compliance-assertion-failure", "control_count": 4 }, { "id": "threat:compliance-deficit", "type": "Threat", "label": "compliance-deficit", "control_count": 5 }, { "id": "threat:contract-violation", "type": "Threat", "label": "contract-violation", "control_count": 7 }, { "id": "threat:credential-compromise", "type": "Threat", "label": "credential-compromise", "control_count": 22 }, { "id": "threat:delegation-abuse", "type": "Threat", "label": "delegation-abuse", "control_count": 13 }, { "id": "threat:escalation-failure", "type": "Threat", "label": "escalation-failure", "control_count": 21 }, { "id": "threat:evidence-fragmentation", "type": "Threat", "label": "evidence-fragmentation", "control_count": 7 }, { "id": "threat:evidence-gap", "type": "Threat", "label": "evidence-gap", "control_count": 18 }, { "id": "threat:evidence-incompleteness", "type": "Threat", "label": "evidence-incompleteness", "control_count": 9 }, { "id": "threat:federation-bypass", "type": "Threat", "label": "federation-bypass", "control_count": 12 }, { "id": "threat:governance-evidence-gap", "type": "Threat", "label": "governance-evidence-gap", "control_count": 9 }, { "id": "threat:governance-gap", "type": "Threat", "label": "governance-gap", "control_count": 16 }, { "id": "threat:identity-spoofing", "type": "Threat", "label": "identity-spoofing", "control_count": 25 }, { "id": "threat:intent-drift", "type": "Threat", "label": "intent-drift", "control_count": 12 }, { "id": "threat:internal-policy-violation", "type": "Threat", "label": "internal-policy-violation", "control_count": 13 }, { "id": "threat:knowledge-source-staleness", "type": "Threat", "label": "knowledge-source-staleness", "control_count": 5 }, { "id": "threat:lateral-movement", "type": "Threat", "label": "lateral-movement", "control_count": 17 }, { "id": "threat:metric-gaming", "type": "Threat", "label": "metric-gaming", "control_count": 4 }, { "id": "threat:org-change-lag", "type": "Threat", "label": "org-change-lag", "control_count": 5 }, { "id": "threat:orphaned-credential", "type": "Threat", "label": "orphaned-credential", "control_count": 13 }, { "id": "threat:policy-bypass", "type": "Threat", "label": "policy-bypass", "control_count": 29 }, { "id": "threat:policy-gap", "type": "Threat", "label": "policy-gap", "control_count": 5 }, { "id": "threat:principal-accountability-gap", "type": "Threat", "label": "principal-accountability-gap", "control_count": 18 }, { "id": "threat:privilege-escalation", "type": "Threat", "label": "privilege-escalation", "control_count": 25 }, { "id": "threat:procurement-bypass", "type": "Threat", "label": "procurement-bypass", "control_count": 8 }, { "id": "threat:regulatory-exposure", "type": "Threat", "label": "regulatory-exposure", "control_count": 6 }, { "id": "threat:regulatory-non-compliance", "type": "Threat", "label": "regulatory-non-compliance", "control_count": 9 }, { "id": "threat:regulatory-noncompliance", "type": "Threat", "label": "regulatory-noncompliance", "control_count": 10 }, { "id": "threat:resource-exhaustion", "type": "Threat", "label": "resource-exhaustion", "control_count": 4 }, { "id": "threat:scope-creep", "type": "Threat", "label": "scope-creep", "control_count": 19 }, { "id": "threat:supply-chain-compromise", "type": "Threat", "label": "supply-chain-compromise", "control_count": 8 }, { "id": "threat:unauthorized-commitment", "type": "Threat", "label": "unauthorized-commitment", "control_count": 13 }, { "id": "threat:unauthorized-deployment", "type": "Threat", "label": "unauthorized-deployment", "control_count": 5 }, { "id": "threat:undisclosed-model-change", "type": "Threat", "label": "undisclosed-model-change", "control_count": 6 } ], "edges": [ { "source": "control:agentic/AA-01", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AA-04", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AA-06", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AA-08", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AA-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AB-01", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AB-01", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AB-02", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AB-02", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AB-03", "target": "threat:cascading-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AB-06", "target": "threat:resource-exhaustion", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AB-08", "target": "threat:attestation-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AG-01", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AG-01", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AG-02", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AG-02", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AG-02", "target": "threat:unauthorized-deployment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AG-04", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AG-04", "target": "threat:regulatory-non-compliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AG-06", "target": "threat:metric-gaming", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AG-08", "target": "threat:attestation-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AG-08", "target": "threat:evidence-incompleteness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AM-02", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AM-09", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AO-01", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AO-02", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AO-02", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AO-05", "target": "threat:resource-exhaustion", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AO-06", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AO-07", "target": "threat:audit-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AO-08", "target": "threat:attestation-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AO-08", "target": "threat:evidence-fragmentation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AT-01", "target": "threat:supply-chain-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AT-02", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AT-02", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AT-07", "target": "threat:audit-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AT-08", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:agentic/AT-08", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-01", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-01", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-01", "target": "threat:unauthorized-commitment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-02", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-02", "target": "threat:contract-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-02", "target": "threat:procurement-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-02", "target": "threat:unauthorized-commitment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-03", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-03", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-03", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-04", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-04", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-04", "target": "threat:unauthorized-commitment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-05", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-05", "target": "threat:procurement-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-05", "target": "threat:unauthorized-commitment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-06", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-06", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-06", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-07", "target": "threat:contract-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-07", "target": "threat:internal-policy-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-07", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-08", "target": "threat:internal-policy-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-08", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-08", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-09", "target": "threat:attestation-unverifiable", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-09", "target": "threat:compliance-deficit", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PA-09", "target": "threat:governance-evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-01", "target": "threat:internal-policy-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-01", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-01", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-02", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-02", "target": "threat:internal-policy-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-02", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-02", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-03", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-03", "target": "threat:internal-policy-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-03", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-03", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-04", "target": "threat:knowledge-source-staleness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-04", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-04", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-04", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-05", "target": "threat:commitment-without-authority", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-05", "target": "threat:contract-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-05", "target": "threat:procurement-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-05", "target": "threat:unauthorized-commitment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-06", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-06", "target": "threat:intent-drift", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-06", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-06", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-07", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-07", "target": "threat:internal-policy-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-07", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-07", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-08", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-08", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-08", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PE-08", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-01", "target": "threat:internal-policy-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-01", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-01", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-02", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-02", "target": "threat:commitment-without-authority", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-02", "target": "threat:unauthorized-commitment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-03", "target": "threat:contract-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-03", "target": "threat:procurement-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-03", "target": "threat:unauthorized-commitment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-04", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-04", "target": "threat:internal-policy-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-04", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-05", "target": "threat:intent-drift", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-05", "target": "threat:knowledge-source-staleness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-05", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-06", "target": "threat:intent-drift", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-06", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-06", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-07", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-07", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-08", "target": "threat:intent-drift", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-08", "target": "threat:internal-policy-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-08", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-09", "target": "threat:attestation-unverifiable", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-09", "target": "threat:compliance-deficit", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PG-09", "target": "threat:governance-evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-01", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-01", "target": "threat:internal-policy-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-01", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-02", "target": "threat:internal-policy-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-02", "target": "threat:knowledge-source-staleness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-02", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-03", "target": "threat:commitment-without-authority", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-03", "target": "threat:contract-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-03", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-04", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-04", "target": "threat:contract-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-04", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-05", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-05", "target": "threat:internal-policy-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-05", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-06", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-06", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-06", "target": "threat:unauthorized-commitment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-07", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-07", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-07", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-07", "target": "threat:procurement-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-08", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-08", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-08", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-09", "target": "threat:attestation-unverifiable", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-09", "target": "threat:compliance-deficit", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PO-09", "target": "threat:governance-evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-01", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-01", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-01", "target": "threat:procurement-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-02", "target": "threat:commitment-without-authority", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-02", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-02", "target": "threat:unauthorized-commitment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-03", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-03", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-03", "target": "threat:procurement-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-04", "target": "threat:commitment-without-authority", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-04", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-04", "target": "threat:unauthorized-commitment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-05", "target": "threat:commitment-without-authority", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-05", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-05", "target": "threat:unauthorized-commitment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-06", "target": "threat:commitment-without-authority", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-06", "target": "threat:intent-drift", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-06", "target": "threat:unauthorized-commitment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-07", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-07", "target": "threat:contract-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-07", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-08", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-08", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-08", "target": "threat:procurement-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-09", "target": "threat:attestation-unverifiable", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-09", "target": "threat:compliance-deficit", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PR-09", "target": "threat:governance-evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-01", "target": "threat:intent-drift", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-01", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-01", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-02", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-02", "target": "threat:intent-drift", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-02", "target": "threat:unauthorized-commitment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-03", "target": "threat:intent-drift", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-03", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-03", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-04", "target": "threat:intent-drift", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-04", "target": "threat:knowledge-source-staleness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-04", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-05", "target": "threat:intent-drift", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-05", "target": "threat:knowledge-source-staleness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-05", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-06", "target": "threat:intent-drift", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-06", "target": "threat:internal-policy-violation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-06", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-06", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-07", "target": "threat:authority-limit-breach", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-07", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-07", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-07", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-08", "target": "threat:intent-drift", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-08", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-08", "target": "threat:principal-accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-08", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-09", "target": "threat:attestation-unverifiable", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-09", "target": "threat:compliance-deficit", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:authority/PV-09", "target": "threat:governance-evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/AU-01", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/AU-01", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/AU-01", "target": "threat:regulatory-noncompliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/AU-08", "target": "threat:attestation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CA-08", "target": "threat:audit-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CA-08", "target": "threat:evidence-incompleteness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CG-01", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CG-01", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CG-02", "target": "threat:policy-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CG-02", "target": "threat:regulatory-exposure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CG-03", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CG-08", "target": "threat:attestation-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CG-08", "target": "threat:audit-readiness-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CG-08", "target": "threat:evidence-incompleteness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CI-03", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CI-06", "target": "threat:audit-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CI-07", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CI-08", "target": "threat:attestation-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CI-08", "target": "threat:audit-readiness-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/CI-08", "target": "threat:evidence-incompleteness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/OB-02", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/OB-02", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/OB-07", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/OB-08", "target": "threat:attestation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/OB-08", "target": "threat:evidence-fragmentation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/RF-01", "target": "threat:regulatory-non-compliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/RF-01", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/RF-03", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/RF-06", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/RF-08", "target": "threat:attestation-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:compliance/RF-08", "target": "threat:evidence-fragmentation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DA-01", "target": "threat:policy-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DA-01", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DA-06", "target": "threat:regulatory-noncompliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DA-08", "target": "threat:audit-readiness-deficit", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DA-08", "target": "threat:compliance-assertion-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DA-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DI-08", "target": "threat:audit-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DL-02", "target": "threat:regulatory-noncompliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DL-08", "target": "threat:attestation-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DL-08", "target": "threat:evidence-incompleteness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DM-03", "target": "threat:regulatory-non-compliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DM-08", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DM-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DV-08", "target": "threat:attestation-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DX-02", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DX-04", "target": "threat:regulatory-non-compliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DX-06", "target": "threat:audit-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DX-08", "target": "threat:compliance-assertion-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:data/DX-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/EF-02", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/EF-05", "target": "threat:regulatory-noncompliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/EF-08", "target": "threat:attestation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/EF-08", "target": "threat:evidence-fragmentation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/EG-01", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/EG-02", "target": "threat:policy-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/EG-03", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/EG-05", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/EG-06", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/EG-07", "target": "threat:metric-gaming", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/EG-08", "target": "threat:attestation-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/EG-08", "target": "threat:evidence-incompleteness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/FA-03", "target": "threat:metric-gaming", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/FA-05", "target": "threat:audit-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/FA-05", "target": "threat:regulatory-noncompliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/FA-07", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/FA-08", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/FA-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/FM-02", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/FM-02", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/FM-08", "target": "threat:audit-readiness-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/FM-08", "target": "threat:compliance-assertion-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/FM-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/FM-08", "target": "threat:regulatory-exposure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/HI-01", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/HI-08", "target": "threat:audit-readiness-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/HI-08", "target": "threat:evidence-incompleteness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/XP-01", "target": "threat:regulatory-noncompliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/XP-02", "target": "threat:regulatory-exposure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/XP-06", "target": "threat:regulatory-noncompliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/XP-07", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/XP-08", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:ethics/XP-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/FC-05", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/FC-08", "target": "threat:attestation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/FC-08", "target": "threat:regulatory-exposure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/FD-08", "target": "threat:evidence-fragmentation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/FG-01", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/FG-04", "target": "threat:undisclosed-model-change", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/FG-08", "target": "threat:attestation-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/FP-01", "target": "threat:regulatory-non-compliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/FP-08", "target": "threat:audit-readiness-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/FP-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/MR-02", "target": "threat:policy-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/MR-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/MV-02", "target": "threat:scope-creep", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/MV-07", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:finance/MV-08", "target": "threat:evidence-fragmentation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-01", "target": "threat:delegation-abuse", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-01", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-02", "target": "threat:delegation-abuse", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-02", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-03", "target": "threat:delegation-abuse", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-03", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-04", "target": "threat:delegation-abuse", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-04", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-05", "target": "threat:delegation-abuse", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-05", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-06", "target": "threat:delegation-abuse", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-06", "target": "threat:federation-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-07", "target": "threat:delegation-abuse", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-07", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-08", "target": "threat:delegation-abuse", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-08", "target": "threat:orphaned-credential", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-09", "target": "threat:attestation-unverifiable", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-09", "target": "threat:audit-readiness-deficit", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/DE-09", "target": "threat:governance-evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-01", "target": "threat:org-change-lag", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-01", "target": "threat:orphaned-credential", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-01", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-02", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-02", "target": "threat:delegation-abuse", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-02", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-03", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-03", "target": "threat:org-change-lag", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-03", "target": "threat:orphaned-credential", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-03", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-04", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-04", "target": "threat:delegation-abuse", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-04", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-04", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-05", "target": "threat:delegation-abuse", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-05", "target": "threat:federation-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-05", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-06", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-06", "target": "threat:federation-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-06", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-07", "target": "threat:org-change-lag", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-07", "target": "threat:orphaned-credential", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-08", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-08", "target": "threat:delegation-abuse", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-08", "target": "threat:federation-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IC-08", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-01", "target": "threat:federation-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-01", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-02", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-02", "target": "threat:federation-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-03", "target": "threat:federation-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-03", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-03", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-04", "target": "threat:federation-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-04", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-05", "target": "threat:federation-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-05", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-06", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-06", "target": "threat:federation-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-06", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-07", "target": "threat:federation-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-07", "target": "threat:orphaned-credential", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-08", "target": "threat:federation-bypass", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-08", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-08", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-09", "target": "threat:attestation-unverifiable", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-09", "target": "threat:audit-readiness-deficit", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IF-09", "target": "threat:governance-evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-01", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-01", "target": "threat:orphaned-credential", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-02", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-02", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-03", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-03", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-03", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-04", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-04", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-05", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-05", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-05", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-06", "target": "threat:org-change-lag", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-06", "target": "threat:orphaned-credential", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-07", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-07", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-08", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/II-08", "target": "threat:orphaned-credential", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-01", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-01", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-02", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-02", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-02", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-03", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-03", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-03", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-04", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-04", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-05", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-05", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-05", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-06", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-06", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-07", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-07", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-08", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-08", "target": "threat:delegation-abuse", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-08", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-08", "target": "threat:orphaned-credential", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-09", "target": "threat:attestation-unverifiable", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-09", "target": "threat:audit-readiness-deficit", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/IM-09", "target": "threat:governance-evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-01", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-01", "target": "threat:orphaned-credential", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-02", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-02", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-03", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-03", "target": "threat:orphaned-credential", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-04", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-04", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-05", "target": "threat:org-change-lag", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-05", "target": "threat:orphaned-credential", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-06", "target": "threat:identity-spoofing", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-06", "target": "threat:orphaned-credential", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-07", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-07", "target": "threat:lateral-movement", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-08", "target": "threat:credential-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-08", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-09", "target": "threat:attestation-unverifiable", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-09", "target": "threat:audit-readiness-deficit", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:identity/NI-09", "target": "threat:governance-evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KC-01", "target": "threat:regulatory-non-compliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KC-02", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KC-08", "target": "threat:audit-readiness-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KG-01", "target": "threat:escalation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KG-01", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KG-02", "target": "threat:policy-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KG-03", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KG-08", "target": "threat:attestation-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KG-08", "target": "threat:evidence-incompleteness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KI-01", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KI-01", "target": "threat:supply-chain-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KI-07", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KI-08", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KI-08", "target": "threat:evidence-incompleteness", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KM-01", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KM-02", "target": "threat:privilege-escalation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KM-04", "target": "threat:regulatory-noncompliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KM-08", "target": "threat:attestation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KR-07", "target": "threat:audit-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KR-08", "target": "threat:attestation-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KR-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:knowledge/KS-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/CR-02", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/CR-02", "target": "threat:regulatory-non-compliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-01", "target": "threat:supply-chain-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-01", "target": "threat:unauthorized-deployment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-01", "target": "threat:undisclosed-model-change", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-02", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-02", "target": "threat:supply-chain-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-02", "target": "threat:undisclosed-model-change", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-03", "target": "threat:supply-chain-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-03", "target": "threat:unauthorized-deployment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-03", "target": "threat:undisclosed-model-change", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-04", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-04", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-04", "target": "threat:regulatory-noncompliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-05", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-05", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-05", "target": "threat:supply-chain-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-06", "target": "threat:supply-chain-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-06", "target": "threat:unauthorized-deployment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-06", "target": "threat:undisclosed-model-change", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-07", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-07", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-08", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-08", "target": "threat:regulatory-noncompliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-08", "target": "threat:supply-chain-compromise", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-09", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-09", "target": "threat:unauthorized-deployment", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-09", "target": "threat:undisclosed-model-change", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-10", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:model/LI-10", "target": "threat:governance-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:privacy/DC-09", "target": "threat:attestation-unverifiable", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:privacy/PC-03", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:privacy/PM-03", "target": "threat:regulatory-non-compliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/FO-02", "target": "threat:resource-exhaustion", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/FO-08", "target": "threat:compliance-assertion-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/FO-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RE-05", "target": "threat:cascading-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RE-05", "target": "threat:resource-exhaustion", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RE-06", "target": "threat:regulatory-non-compliance", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RE-08", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RG-01", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RG-02", "target": "threat:policy-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RG-03", "target": "threat:accountability-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RG-03", "target": "threat:regulatory-exposure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RG-07", "target": "threat:metric-gaming", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RG-08", "target": "threat:attestation-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RG-08", "target": "threat:evidence-fragmentation", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RO-05", "target": "threat:cascading-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RO-08", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RO-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RO-08", "target": "threat:regulatory-exposure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RP-08", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RP-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RV-03", "target": "threat:cascading-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RV-08", "target": "threat:audit-failure", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:resilience/RV-08", "target": "threat:evidence-gap", "type": "addresses", "provenance": { "source": "threatcov" }, "confidence": null }, { "source": "control:security/AS-01", "target": "AML.T0010.003", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-01", "target": "AML.T0018", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-01", "target": "AML.T0018.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-01", "target": "AML.T0018.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-01", "target": "AML.T0020", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-01", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-01", "target": "AML.T0043.004", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-01", "target": "AML.T0057", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-02", "target": "AML.T0002.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-02", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-02", "target": "AML.T0010.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-02", "target": "AML.T0011", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-02", "target": "AML.T0011.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-02", "target": "AML.T0011.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-02", "target": "AML.T0019", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-02", "target": "AML.T0020", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-02", "target": "AML.T0058", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-03", "target": "AML.T0010.003", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-03", "target": "AML.T0018", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-03", "target": "AML.T0018.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-03", "target": "AML.T0018.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-03", "target": "AML.T0020", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-03", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-03", "target": "AML.T0043.004", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-03", "target": "AML.T0057", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-05", "target": "AML.T0010.003", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-05", "target": "AML.T0018", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-05", "target": "AML.T0018.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-05", "target": "AML.T0018.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-05", "target": "AML.T0020", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-05", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-05", "target": "AML.T0043.004", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-05", "target": "AML.T0057", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-06", "target": "AML.T0002.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-06", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-06", "target": "AML.T0010.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-06", "target": "AML.T0011", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-06", "target": "AML.T0011.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-06", "target": "AML.T0011.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-06", "target": "AML.T0019", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-06", "target": "AML.T0020", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-06", "target": "AML.T0058", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-07", "target": "AML.T0002.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-07", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-07", "target": "AML.T0010.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-07", "target": "AML.T0011", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-07", "target": "AML.T0011.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-07", "target": "AML.T0011.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-07", "target": "AML.T0019", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-07", "target": "AML.T0020", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/AS-07", "target": "AML.T0058", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-01", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-01", "target": "AML.T0085", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-01", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-01", "target": "AML.T0085.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-01", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-01", "target": "AML.T0097", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "high" }, { "source": "control:security/EC-01", "target": "AML.T0098", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-01", "target": "AML.T0105", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "high" }, { "source": "control:security/EC-01", "target": "AML.T0112", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/EC-02", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-02", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-02", "target": "AML.T0096", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/EC-02", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-02", "target": "AML.T0114", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/EC-03", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-03", "target": "AML.T0080", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-03", "target": "AML.T0080.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-03", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-03", "target": "AML.T0099", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/EC-03", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-04", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-04", "target": "AML.T0082", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-04", "target": "AML.T0085", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-04", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-04", "target": "AML.T0085.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-04", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-04", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0005", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0005.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0013", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0014", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0024.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0024.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0024.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0029", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0034", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0034.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/EC-05", "target": "AML.T0034.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0042", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0043.003", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0046", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-05", "target": "AML.T0062", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-06", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-06", "target": "AML.T0082", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-06", "target": "AML.T0085", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-06", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-06", "target": "AML.T0085.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-06", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-06", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-07", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-07", "target": "AML.T0080", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-07", "target": "AML.T0080.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-07", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/EC-07", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-07", "target": "AML.T0099", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "high" }, { "source": "control:security/EC-07", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0007", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0010.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0010.003", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0018", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0018.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0018.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0020", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0025", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0035", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0042", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0043.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0044", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0048.004", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0063", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-08", "target": "AML.T0083", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/EC-08", "target": "AML.T0098", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "high" }, { "source": "control:security/EC-09", "target": "AML.T0002.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-09", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-09", "target": "AML.T0010.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-09", "target": "AML.T0011", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-09", "target": "AML.T0011.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-09", "target": "AML.T0011.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "high" }, { "source": "control:security/EC-09", "target": "AML.T0019", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-09", "target": "AML.T0110", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "high" }, { "source": "control:security/EC-09", "target": "AML.T0112.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/EC-10", "target": "AML.T0005", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-10", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-10", "target": "AML.T0029", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-10", "target": "AML.T0034", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-10", "target": "AML.T0040", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-10", "target": "AML.T0042", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-10", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-10", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-10", "target": "AML.T0046", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-10", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/EC-10", "target": "AML.T0063", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-01", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-01", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-01", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-01", "target": "AML.T0054", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-01", "target": "AML.T0056", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-01", "target": "AML.T0057", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-01", "target": "AML.T0061", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-01", "target": "AML.T0062", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-01", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-01", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0005.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0024.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0024.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0024.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0040", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0047", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0051.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0051.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0051.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0085", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0085.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-02", "target": "AML.T0114", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-04", "target": "AML.T0005", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-04", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-04", "target": "AML.T0029", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-04", "target": "AML.T0034", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-04", "target": "AML.T0040", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-04", "target": "AML.T0042", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-04", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-04", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-04", "target": "AML.T0046", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-04", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-04", "target": "AML.T0063", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0005", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0005.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0013", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0014", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0024.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0024.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0024.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0029", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0034", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0042", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0043.003", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0046", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-06", "target": "AML.T0062", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-07", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-07", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-07", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-07", "target": "AML.T0054", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-07", "target": "AML.T0056", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-07", "target": "AML.T0057", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-07", "target": "AML.T0061", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-07", "target": "AML.T0062", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-07", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-07", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0005", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0029", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0034", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0040", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0042", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0046", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0063", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0082", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0085", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0085.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-08", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0011", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0011.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0011.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0052", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0052.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0052.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0054", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0056", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0057", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0061", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0062", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/GV-10", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-01", "target": "AML.T0005", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-01", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-01", "target": "AML.T0029", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-01", "target": "AML.T0034", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-01", "target": "AML.T0040", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-01", "target": "AML.T0042", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-01", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-01", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-01", "target": "AML.T0046", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-01", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-01", "target": "AML.T0063", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0005", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0029", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0034", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0040", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0042", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0046", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0063", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0082", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0085", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0085.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-02", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-03", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-03", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-03", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-03", "target": "AML.T0054", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-03", "target": "AML.T0056", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-03", "target": "AML.T0057", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-03", "target": "AML.T0061", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-03", "target": "AML.T0062", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-03", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-03", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0005", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0029", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0034", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0040", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0042", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0046", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0063", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0082", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0085", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0085.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/IA-04", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0002.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0010.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0010.005", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/PT-02", "target": "AML.T0011", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0011.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0011.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0019", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0020", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0058", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0082", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0085", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0085.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0104", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.T0109", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/PT-02", "target": "AML.T0111", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/PT-03", "target": "AML.T0002.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0010.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0010.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0010.003", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0011", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0011.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0011.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0018", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0018.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0018.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0018.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0019", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0020", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-03", "target": "AML.T0058", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0015", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0029", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0031", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0043.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0043.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0043.003", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0043.004", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0051.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0051.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0051.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-04", "target": "AML.T0099", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "high" }, { "source": "control:security/PT-05", "target": "AML.T0005", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-05", "target": "AML.T0005.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-05", "target": "AML.T0013", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-05", "target": "AML.T0014", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-05", "target": "AML.T0024.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-05", "target": "AML.T0024.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-05", "target": "AML.T0024.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-05", "target": "AML.T0042", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-05", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-05", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-05", "target": "AML.T0063", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0005", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0005.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0013", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0014", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0015", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0024.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0024.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0024.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0029", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0031", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0042", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0043.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0043.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0043.003", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0043.004", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0051.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0051.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0051.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0063", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-06", "target": "AML.T0099", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/PT-07", "target": "AML.T0002.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0010.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0011", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0011.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0011.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0011.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/PT-07", "target": "AML.T0015", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0019", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0020", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0029", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0031", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0043.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0043.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0043.003", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0043.004", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0051.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0051.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0051.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0058", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0104", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.T0110", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "high" }, { "source": "control:security/PT-08", "target": "AML.T0015", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-08", "target": "AML.T0029", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-08", "target": "AML.T0031", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-08", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-08", "target": "AML.T0043.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-08", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-08", "target": "AML.T0043.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-08", "target": "AML.T0043.003", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-08", "target": "AML.T0043.004", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-08", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-08", "target": "AML.T0080", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/PT-08", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/PT-08", "target": "AML.T0094", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/PT-08", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0005.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0024.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0024.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0024.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0040", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0047", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0051.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0051.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0051.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0085", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0085.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0102", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/RT-01", "target": "AML.T0105", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.T0112.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/RT-01", "target": "AML.T0114", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0015", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0029", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0031", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0043", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0043.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0043.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0043.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0043.003", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0043.004", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0051.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0054", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0056", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0057", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0061", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0062", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.T0093", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "apeiris-lens-judgment" }, "confidence": "medium" }, { "source": "control:security/RT-03", "target": "AML.T0005.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0024.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0024.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0024.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0040", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0047", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0051.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0051.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0051.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0054", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0056", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0057", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0061", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0062", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0085", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0085.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-03", "target": "AML.T0114", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0005.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0024.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0024.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0024.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0040", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0047", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0051.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0051.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0051.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0085", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0085.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-04", "target": "AML.T0114", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-05", "target": "AML.T0010", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-05", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-05", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-05", "target": "AML.T0054", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-05", "target": "AML.T0056", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-05", "target": "AML.T0057", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-05", "target": "AML.T0061", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-05", "target": "AML.T0062", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0005.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0024.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0024.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0024.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0040", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0047", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0051.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0051.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0051.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0085", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0085.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-07", "target": "AML.T0114", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0005.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0024", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0024.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0024.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0024.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0040", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0047", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0051", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0051.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0051.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0051.002", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0053", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0085", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0085.000", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0085.001", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0086", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0101", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:security/RT-08", "target": "AML.T0114", "type": "addresses", "provenance": { "source": "mitre_atlas", "basis": "atlas-asserted-mitigation-link" }, "confidence": "high" }, { "source": "control:agentic/AA-01", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AA-02", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AA-03", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AA-04", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AA-05", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AA-06", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AA-07", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AA-08", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AB-01", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AB-02", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AB-03", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AB-04", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AB-05", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AB-06", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AB-07", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AB-08", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AB-09", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AG-01", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AG-02", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AG-03", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AG-04", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AG-05", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AG-06", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AG-07", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AG-08", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AM-01", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AM-02", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AM-03", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AM-04", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AM-05", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AM-06", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AM-07", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AM-08", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AM-09", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AO-01", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AO-02", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AO-03", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AO-04", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AO-05", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AO-06", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AO-07", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AO-08", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AT-01", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AT-02", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AT-03", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AT-04", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AT-05", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AT-06", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AT-07", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AT-08", "target": "domain:agentic", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PA-01", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PA-02", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PA-03", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PA-04", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PA-05", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PA-06", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PA-07", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PA-08", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PA-09", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PE-01", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PE-02", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PE-03", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PE-04", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PE-05", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PE-06", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PE-07", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PE-08", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PG-01", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PG-02", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PG-03", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PG-04", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PG-05", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PG-06", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PG-07", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PG-08", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PG-09", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PO-01", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PO-02", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PO-03", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PO-04", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PO-05", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PO-06", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PO-07", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PO-08", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PO-09", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PR-01", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PR-02", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PR-03", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PR-04", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PR-05", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PR-06", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PR-07", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PR-08", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PR-09", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PV-01", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PV-02", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PV-03", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PV-04", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PV-05", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PV-06", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PV-07", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PV-08", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:authority/PV-09", "target": "domain:authority", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/AU-01", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/AU-02", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/AU-03", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/AU-04", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/AU-05", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/AU-06", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/AU-07", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/AU-08", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CA-01", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CA-02", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CA-03", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CA-04", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CA-05", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CA-06", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CA-07", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CA-08", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CG-01", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CG-02", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CG-03", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CG-04", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CG-05", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CG-06", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CG-07", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CG-08", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CI-01", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CI-02", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CI-03", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CI-04", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CI-05", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CI-06", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CI-07", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/CI-08", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/OB-01", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/OB-02", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/OB-03", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/OB-04", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/OB-05", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/OB-06", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/OB-07", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/OB-08", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/RF-01", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/RF-02", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/RF-03", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/RF-04", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/RF-05", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/RF-06", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/RF-07", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:compliance/RF-08", "target": "domain:compliance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DA-01", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DA-02", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DA-03", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DA-04", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DA-05", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DA-06", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DA-07", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DA-08", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DI-01", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DI-02", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DI-03", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DI-04", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DI-05", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DI-06", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DI-07", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DI-08", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DL-01", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DL-02", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DL-03", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DL-04", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DL-05", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DL-06", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DL-07", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DL-08", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DM-01", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DM-02", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DM-03", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DM-04", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DM-05", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DM-06", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DM-07", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DM-08", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DV-01", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DV-02", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DV-03", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DV-04", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DV-05", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DV-06", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DV-07", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DV-08", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DX-01", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DX-02", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DX-03", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DX-04", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DX-05", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DX-06", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DX-07", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:data/DX-08", "target": "domain:data", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EF-01", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EF-02", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EF-03", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EF-04", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EF-05", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EF-06", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EF-07", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EF-08", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EG-01", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EG-02", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EG-03", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EG-04", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EG-05", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EG-06", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EG-07", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EG-08", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/EG-09", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FA-01", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FA-02", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FA-03", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FA-04", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FA-05", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FA-06", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FA-07", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FA-08", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FM-01", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FM-02", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FM-03", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FM-04", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FM-05", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FM-06", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FM-07", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/FM-08", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/HI-01", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/HI-02", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/HI-03", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/HI-04", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/HI-05", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/HI-06", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/HI-07", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/HI-08", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/XP-01", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/XP-02", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/XP-03", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/XP-04", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/XP-05", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/XP-06", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/XP-07", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/XP-08", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:ethics/XP-09", "target": "domain:ethics", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FC-01", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FC-02", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FC-03", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FC-04", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FC-05", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FC-06", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FC-07", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FC-08", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FD-01", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FD-02", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FD-03", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FD-04", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FD-05", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FD-06", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FD-07", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FD-08", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FG-01", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FG-02", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FG-03", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FG-04", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FG-05", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FG-06", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FG-07", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FG-08", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FP-01", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FP-02", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FP-03", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FP-04", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FP-05", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FP-06", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FP-07", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/FP-08", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MR-01", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MR-02", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MR-03", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MR-04", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MR-05", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MR-06", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MR-07", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MR-08", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MV-01", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MV-02", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MV-03", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MV-04", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MV-05", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MV-06", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MV-07", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:finance/MV-08", "target": "domain:finance", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/DE-01", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/DE-02", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/DE-03", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/DE-04", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/DE-05", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/DE-06", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/DE-07", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/DE-08", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/DE-09", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IC-01", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IC-02", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IC-03", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IC-04", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IC-05", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IC-06", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IC-07", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IC-08", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IF-01", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IF-02", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IF-03", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IF-04", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IF-05", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IF-06", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IF-07", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IF-08", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IF-09", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/II-01", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/II-02", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/II-03", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/II-04", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/II-05", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/II-06", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/II-07", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/II-08", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IM-01", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IM-02", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IM-03", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IM-04", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IM-05", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IM-06", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IM-07", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IM-08", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/IM-09", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/NI-01", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/NI-02", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/NI-03", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/NI-04", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/NI-05", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/NI-06", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/NI-07", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/NI-08", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:identity/NI-09", "target": "domain:identity", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KC-01", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KC-02", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KC-03", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KC-04", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KC-05", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KC-06", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KC-07", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KC-08", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KG-01", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KG-02", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KG-03", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KG-04", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KG-05", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KG-06", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KG-07", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KG-08", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KI-01", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KI-02", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KI-03", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KI-04", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KI-05", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KI-06", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KI-07", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KI-08", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KM-01", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KM-02", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KM-03", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KM-04", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KM-05", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KM-06", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KM-07", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KM-08", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KR-01", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KR-02", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KR-03", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KR-04", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KR-05", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KR-06", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KR-07", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KR-08", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KR-09", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KS-01", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KS-02", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KS-03", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KS-04", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KS-05", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KS-06", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KS-07", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:knowledge/KS-08", "target": "domain:knowledge", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/BH-01", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/BH-02", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/BH-03", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/BH-04", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/BH-05", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/BH-06", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/BH-07", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/BH-08", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/BH-09", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/BH-10", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/CR-01", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/CR-02", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/CR-03", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/CR-04", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/CR-05", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/CR-06", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/CR-07", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/CR-08", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/EV-01", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/EV-02", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/EV-03", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/EV-04", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/EV-05", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/EV-06", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/EV-07", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/EV-08", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/EV-09", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/EV-10", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/EV-11", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/EV-12", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/EV-13", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/LI-01", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/LI-02", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/LI-03", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/LI-04", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/LI-05", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/LI-06", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/LI-07", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/LI-08", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/LI-09", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/LI-10", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/OA-01", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/OA-02", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/OA-03", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/OA-04", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/OA-05", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/OA-06", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/OA-07", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/OA-08", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/TG-01", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/TG-02", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/TG-03", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/TG-04", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/TG-05", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/TG-06", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/TG-07", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:model/TG-08", "target": "domain:model", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DC-01", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DC-02", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DC-03", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DC-04", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DC-05", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DC-06", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DC-07", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DC-08", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DC-09", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DG-01", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DG-02", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DG-03", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DG-04", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DG-05", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DG-06", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DG-07", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DG-08", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DP-01", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DP-02", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DP-03", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DP-04", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DP-05", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DP-06", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DP-07", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DP-08", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DS-01", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DS-02", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DS-03", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DS-04", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DS-05", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DS-06", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DS-07", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/DS-08", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PC-01", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PC-02", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PC-03", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PC-04", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PC-05", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PC-06", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PC-07", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PC-08", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PM-01", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PM-02", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PM-03", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PM-04", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PM-05", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PM-06", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PM-07", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:privacy/PM-08", "target": "domain:privacy", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/FO-01", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/FO-02", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/FO-03", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/FO-04", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/FO-05", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/FO-06", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/FO-07", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/FO-08", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RE-01", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RE-02", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RE-03", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RE-04", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RE-05", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RE-06", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RE-07", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RE-08", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RG-01", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RG-02", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RG-03", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RG-04", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RG-05", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RG-06", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RG-07", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RG-08", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RO-01", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RO-02", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RO-03", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RO-04", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RO-05", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RO-06", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RO-07", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RO-08", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RP-01", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RP-02", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RP-03", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RP-04", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RP-05", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RP-06", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RP-07", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RP-08", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RV-01", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RV-02", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RV-03", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RV-04", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RV-05", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RV-06", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RV-07", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:resilience/RV-08", "target": "domain:resilience", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/AS-01", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/AS-02", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/AS-03", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/AS-04", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/AS-05", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/AS-06", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/AS-07", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/AS-08", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/EC-01", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/EC-02", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/EC-03", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/EC-04", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/EC-05", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/EC-06", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/EC-07", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/EC-08", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/EC-09", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/EC-10", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/EC-11", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/EC-12", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/GV-01", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/GV-02", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/GV-03", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/GV-04", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/GV-05", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/GV-06", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/GV-07", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/GV-08", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/GV-09", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/GV-10", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/GV-11", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/IA-01", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/IA-02", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/IA-03", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/IA-04", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/IA-05", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/IA-06", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/PT-01", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/PT-02", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/PT-03", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/PT-04", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/PT-05", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/PT-06", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/PT-07", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/PT-08", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/RT-01", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/RT-02", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/RT-03", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/RT-04", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/RT-05", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/RT-06", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/RT-07", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/RT-08", "target": "domain:security", "type": "belongs_to", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:agentic/AA-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-01", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-01", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-01", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-01", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-01", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-02", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-02", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-02", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-03", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-03", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-03", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-04", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-04", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-04", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-04", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-05", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-05", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-05", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-06", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-06", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-06", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-06", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-07", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-07", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-07", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-07", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-08", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-08", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AA-08", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-01", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-01", "target": "source:databricks_omnigent_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-01", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-01", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-01", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-01", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-02", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-02", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-02", "target": "source:hashicorp_vault_aar_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-02", "target": "source:ms_ifc_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-02", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-02", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-03", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-03", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-03", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-03", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-04", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-04", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-04", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-04", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-05", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-05", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-05", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-05", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-05", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-06", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-06", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-06", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-06", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-07", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-07", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-07", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-07", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-08", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-08", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-08", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AB-09", "target": "source:owasp_aisvs", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "industry-framework" }, { "source": "control:agentic/AG-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-01", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-01", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-01", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-02", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-02", "target": "source:ncsc_cisa_secure_ai_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:agentic/AG-02", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-02", "target": "source:owasp_aivss", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "industry-framework" }, { "source": "control:agentic/AG-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-03", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-03", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-03", "target": "source:owasp_aivss", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "industry-framework" }, { "source": "control:agentic/AG-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-04", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-04", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-05", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-05", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-06", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-06", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-06", "target": "source:owasp_aivss", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "industry-framework" }, { "source": "control:agentic/AG-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-07", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-07", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-08", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AG-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-01", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-01", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-01", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-01", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-02", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-02", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-02", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-02", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-02", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-03", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-03", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-03", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-03", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-04", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-04", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-05", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-05", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-05", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-06", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-06", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-07", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-07", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-07", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-08", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AM-09", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:agentic/AM-09", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:agentic/AO-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-01", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-01", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-02", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-02", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-02", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-03", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-03", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-04", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-04", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-05", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-05", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-06", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-07", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-07", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-07", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AO-08", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-01", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-01", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-01", "target": "source:owasp_aisvs_v1", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-02", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-02", "target": "source:databricks_omnigent_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-02", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-02", "target": "source:hashicorp_vault_aar_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-02", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-03", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-03", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-04", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-04", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-04", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-05", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-05", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-05", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-06", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-06", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-06", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-06", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-07", "target": "source:aws_bedrock_guardrails_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-07", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-07", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-07", "target": "source:salesforce_einstein_trust_layer_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-08", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:agentic/AT-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-01", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-01", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PA-01", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-01", "target": "source:hashicorp_vault_aar_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-01", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PA-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PA-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-01", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PA-01", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-02", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-02", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PA-02", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PA-02", "target": "source:databricks_omnigent_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-02", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-02", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PA-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-02", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PA-02", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-03", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-03", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PA-03", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-03", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PA-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-03", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PA-03", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PA-03", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-04", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-04", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PA-04", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PA-04", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:authority/PA-04", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-04", "target": "source:oecd_cg", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PA-04", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-05", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-05", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PA-05", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-05", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PA-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-05", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PA-05", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-06", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-06", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-06", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PA-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-06", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PA-06", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PA-06", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-07", "target": "source:aicpa-soc2", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PA-07", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-07", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PA-07", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-07", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PA-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-07", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PA-07", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-08", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-08", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-08", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PA-08", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PA-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-08", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PA-08", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PA-09", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PA-09", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PE-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-01", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-01", "target": "source:iso_27001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PE-01", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PE-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-01", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PE-01", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-02", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-02", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:authority/PE-02", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:authority/PE-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-02", "target": "source:oecd_cg", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PE-02", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-03", "target": "source:aicpa-soc2", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PE-03", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-03", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-03", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PE-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-03", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PE-03", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-04", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-04", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-04", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PE-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-04", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PE-05", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-05", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PE-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-05", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PE-05", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-06", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-06", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PE-06", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PE-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-06", "target": "source:oecd_cg", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PE-06", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-07", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PE-07", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-07", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PE-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-07", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PE-07", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-08", "target": "source:aicpa-soc2", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PE-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-08", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-08", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PE-08", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PE-08", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PE-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-01", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-01", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-01", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PG-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PG-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-01", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PG-01", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-02", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-02", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PG-02", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-02", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PG-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-02", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PG-02", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-03", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-03", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PG-03", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-03", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PG-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-03", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PG-04", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-04", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-04", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PG-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-04", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PG-04", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PG-05", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-05", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-05", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PG-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-05", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PG-05", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PG-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-06", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-06", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PG-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-06", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PG-06", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PG-06", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-07", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-07", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PG-07", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-07", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PG-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-07", "target": "source:oecd_cg", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PG-08", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-08", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-08", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PG-08", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PG-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PG-08", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PG-09", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PG-09", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PO-01", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-01", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-01", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-01", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PO-01", "target": "source:opa_rego_docs_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-02", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-02", "target": "source:cobit_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-02", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-02", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-02", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-02", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PO-03", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-03", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-03", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-03", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-03", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PO-04", "target": "source:acc_legal_ops_contract_mgmt", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-04", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-04", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-04", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-04", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-04", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PO-05", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-05", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:authority/PO-05", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-05", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-05", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PO-05", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PO-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-06", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-06", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PO-06", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-06", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PO-06", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-07", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-07", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-07", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-07", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-07", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PO-07", "target": "source:oecd_ai_principles", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PO-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-08", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PO-08", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-08", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-08", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PO-08", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PO-09", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PO-09", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PR-01", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-01", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PR-01", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-01", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-01", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PR-01", "target": "source:oecd_cg", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PR-02", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-02", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PR-02", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-02", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PR-02", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PR-02", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-03", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-03", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-03", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-03", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-03", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PR-03", "target": "source:oecd_cg", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PR-04", "target": "source:acc_legal_ops_contract_mgmt", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-04", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-04", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-04", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-04", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-04", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PR-05", "target": "source:aicpa-soc2", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-05", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-05", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-05", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-05", "target": "source:itil4_service_level_mgmt", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-05", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PR-06", "target": "source:acc_legal_ops_contract_mgmt", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-06", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-06", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PR-06", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PR-06", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-07", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-07", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PR-07", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-07", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-07", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-07", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PR-08", "target": "source:aicpa-soc2", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-08", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-08", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-08", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-08", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PR-08", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PR-08", "target": "source:sox", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:authority/PR-09", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PR-09", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PV-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-01", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-01", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PV-01", "target": "source:databricks_omnigent_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-01", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:authority/PV-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PV-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-01", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PV-01", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-02", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-02", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PV-02", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:authority/PV-02", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-02", "target": "source:hashicorp_vault_aar_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-02", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PV-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-02", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PV-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-03", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:authority/PV-03", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-03", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PV-03", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PV-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-03", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PV-03", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-04", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-04", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-04", "target": "source:iso_37301", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PV-04", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PV-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-04", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PV-04", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-05", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-05", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-05", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PV-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-05", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PV-05", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PV-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-06", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-06", "target": "source:coso_erm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:authority/PV-06", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:authority/PV-06", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-06", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PV-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-06", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PV-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-07", "target": "source:aws_organizations_scp_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-07", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:authority/PV-07", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PV-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-07", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PV-07", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-08", "target": "source:google_org_policy_service_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-08", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PV-08", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PV-08", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:authority/PV-08", "target": "source:okta_authz_server_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:authority/PV-09", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:authority/PV-09", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:compliance/AU-01", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-01", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-01", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-02", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-02", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-02", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-02", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-02", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-03", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-03", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-03", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-04", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-04", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-04", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-04", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-05", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-05", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-05", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-06", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-06", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-07", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-07", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-07", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-07", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-07", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-08", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-08", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-08", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-08", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/AU-08", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-01", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-01", "target": "source:csa_ai_caiq_v1", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-01", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:compliance/CA-01", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-01", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-02", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-02", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-02", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-02", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-03", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-03", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-04", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-04", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-04", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-04", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-05", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-05", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-05", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-05", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-06", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-06", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-07", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-07", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-07", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-07", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-07", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-08", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-08", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-08", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CA-08", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-01", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-01", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-01", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-02", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-02", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-02", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-02", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-02", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-03", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-03", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-03", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-04", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-04", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-04", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-05", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-05", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-05", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-05", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-05", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-06", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-06", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-06", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-06", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-06", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-07", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-07", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-07", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-08", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-08", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-08", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-08", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CG-08", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-01", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-02", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-02", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-02", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-03", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-04", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-04", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-04", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-05", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-06", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-06", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-06", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-06", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-07", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-07", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-08", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-08", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-08", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/CI-08", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-01", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-01", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-01", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-01", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-02", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-02", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-03", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-03", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-04", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-04", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-04", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-05", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-05", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-05", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-06", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-06", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-06", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-06", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-07", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-07", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-07", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-07", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-08", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-08", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-08", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/OB-08", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-01", "target": "source:dora", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:compliance/RF-01", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-01", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-01", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-02", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-02", "target": "source:nis2", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:compliance/RF-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-03", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-03", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-03", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-03", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-04", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-05", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-05", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-05", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-05", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-05", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-06", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-06", "target": "source:google_cloud_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-06", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-06", "target": "source:okta_identity_governance_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-06", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-07", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-07", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-08", "target": "source:aws_artifact_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:compliance/RF-08", "target": "source:microsoft_purview_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DA-01", "target": "source:eu_data_gov_act_2022_868", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DA-02", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DA-02", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DA-02", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:data/DA-02", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:data/DA-03", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DA-04", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DA-05", "target": "source:cobit_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DA-05", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DA-05", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DA-06", "target": "source:cobit_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DA-06", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DA-06", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:data/DA-06", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:data/DA-07", "target": "source:cobit_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DA-07", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DA-07", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DA-07", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:data/DA-07", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:data/DA-08", "target": "source:cobit_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DA-08", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DA-08", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DA-08", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DA-08", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:data/DI-01", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DI-01", "target": "source:eu_data_act_2023_2854", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DI-01", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DI-02", "target": "source:aws_lake_formation_macie_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DI-02", "target": "source:google_dataplex_bigquery_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DI-03", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DI-03", "target": "source:snowflake_horizon", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DI-04", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DI-05", "target": "source:aws_lake_formation_macie_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DI-05", "target": "source:google_dataplex_bigquery_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DI-06", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DI-06", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DI-07", "target": "source:cobit_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DI-07", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DI-07", "target": "source:dcam", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DI-07", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DI-07", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DI-08", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DL-01", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DL-01", "target": "source:openlineage_spec_1_0", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DL-02", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DL-02", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DL-03", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DL-03", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DL-03", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DL-03", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:data/DL-03", "target": "source:ms_ifc_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DL-03", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:data/DL-04", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DL-04", "target": "source:google_dataplex_bigquery_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DL-05", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DL-06", "target": "source:cobit_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DL-06", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DL-06", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DL-06", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:data/DL-06", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:data/DL-07", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DL-07", "target": "source:snowflake_horizon", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DL-08", "target": "source:cobit_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DL-08", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DL-08", "target": "source:dcam", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DL-08", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DL-08", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DL-08", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:data/DM-01", "target": "source:data_contract_spec_1_0", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-01", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-01", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-02", "target": "source:aws_lake_formation_macie_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-02", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-03", "target": "source:cobit_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DM-03", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-03", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DM-03", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DM-03", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:data/DM-03", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:data/DM-04", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-04", "target": "source:snowflake_horizon", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-05", "target": "source:google_dataplex_bigquery_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-06", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-06", "target": "source:google_dataplex_bigquery_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-06", "target": "source:snowflake_horizon", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-07", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-08", "target": "source:cobit_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DM-08", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DM-08", "target": "source:dcam", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DM-08", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DM-08", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DM-08", "target": "source:iso_8000", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:data/DV-01", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-01", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-02", "target": "source:google_dataplex_bigquery_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-03", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-03", "target": "source:google_dataplex_bigquery_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-04", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-04", "target": "source:snowflake_horizon", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-05", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-06", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-06", "target": "source:snowflake_horizon", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-07", "target": "source:aws_lake_formation_macie_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-07", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-07", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-08", "target": "source:cobit_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DV-08", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DV-08", "target": "source:dcam", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DV-08", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DV-08", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DV-08", "target": "source:iso_8000", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:data/DX-01", "target": "source:iso_5259_1_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:data/DX-01", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DX-01", "target": "source:ms_ifc_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DX-02", "target": "source:cobit_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DX-02", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DX-02", "target": "source:dcam", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DX-02", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DX-02", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:data/DX-03", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DX-03", "target": "source:google_dataplex_bigquery_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DX-03", "target": "source:snowflake_horizon", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DX-04", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DX-05", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DX-06", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DX-07", "target": "source:microsoft_purview_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DX-08", "target": "source:cobit_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:data/DX-08", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:data/DX-08", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:data/DX-08", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:ethics/EF-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-01", "target": "source:colorado_sb26_189", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:ethics/EF-01", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-01", "target": "source:iso_23894", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:ethics/EF-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-01", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-02", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-02", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-02", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-03", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-03", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-03", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-04", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-04", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-04", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-04", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-04", "target": "source:plot4ai", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-05", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-05", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-05", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-06", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-06", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-06", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-07", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-08", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EF-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-01", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-02", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-02", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-02", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-03", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-04", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-04", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-05", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-05", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-05", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-05", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-06", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-06", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-06", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-07", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-07", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-07", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-08", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-08", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-08", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/EG-09", "target": "source:plot4ai", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FA-01", "target": "source:doj_ai_guidance_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:ethics/FA-01", "target": "source:eeoc_ai_hiring_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:ethics/FA-01", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FA-01", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FA-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FA-02", "target": "source:ftc_ai_bias_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:ethics/FA-02", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FA-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FA-02", "target": "source:plot4ai", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FA-03", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FA-03", "target": "source:nyc_ll144_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:ethics/FA-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FA-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FA-06", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FA-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FA-08", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-01", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-01", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-01", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-01", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-02", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-02", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-02", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-03", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-03", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-03", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-03", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-04", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-05", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-05", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-05", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-06", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-06", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-06", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-07", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-08", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-08", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/FM-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-02", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-02", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-02", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-03", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-03", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-03", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-03", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-04", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-04", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-05", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-06", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-06", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-06", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-07", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-07", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-07", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/HI-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-01", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-01", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-01", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-02", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-02", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-03", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-03", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-04", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-04", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-04", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-05", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-05", "target": "source:ibm_ai_fairness_360_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-05", "target": "source:meta_llama_responsible_use_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-05", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-06", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-06", "target": "source:openai_model_spec_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-07", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-08", "target": "source:google_ai_principles_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:ethics/XP-09", "target": "source:plot4ai", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-01", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-01", "target": "source:finra_rn_24_09", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:finance/FC-01", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-01", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-01", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-02", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-02", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-02", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-02", "target": "source:sec_predictive_analytics_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "informative-reference" }, { "source": "control:finance/FC-03", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-03", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-03", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-04", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-04", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-04", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-04", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-05", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-05", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-05", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-05", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-06", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-06", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-06", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-07", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-07", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-07", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-07", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-08", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-08", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-08", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FC-08", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-01", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-01", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-01", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-01", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-02", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-02", "target": "source:cfpb_adverse_action_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:finance/FD-02", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-02", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-03", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-03", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-04", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-04", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-04", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-06", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-06", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-06", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-07", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-07", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-07", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-08", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-08", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-08", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FD-08", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-01", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-01", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-01", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-02", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-02", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-02", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-02", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-03", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-03", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-04", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-04", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-04", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-05", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-05", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-05", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-06", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-06", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-07", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-07", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-08", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-08", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-08", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FG-08", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-01", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-01", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-02", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-02", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-02", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-03", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-03", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-04", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-04", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-04", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-04", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-05", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-05", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-05", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-06", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-06", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-06", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-06", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-07", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-07", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-07", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-08", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-08", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-08", "target": "source:okta_financial_services_access_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/FP-08", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-01", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-01", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-01", "target": "source:occ_2024_7", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:finance/MR-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-02", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-02", "target": "source:ffiec_it_handbook_da", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:finance/MR-02", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-03", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-03", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-04", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-05", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-05", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-05", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-06", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-06", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-06", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-07", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-07", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-08", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-08", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MR-08", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-01", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-01", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-01", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-02", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-02", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-03", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-03", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-03", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-04", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-05", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-05", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-05", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-06", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-06", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-06", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-07", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-07", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-07", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-08", "target": "source:aws_financial_services_compliance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-08", "target": "source:google_cloud_financial_services_ai_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:finance/MV-08", "target": "source:openai_enterprise_policies_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-01", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-01", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-01", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-01", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/DE-01", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-01", "target": "source:rfc_9700_oauth_bcp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-02", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-02", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-02", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-02", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-02", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/DE-02", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-03", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-03", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-03", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-03", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/DE-03", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-04", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-04", "target": "source:databricks_omnigent_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-04", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-04", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-04", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-04", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/DE-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-05", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-05", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-05", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/DE-06", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-06", "target": "source:eidas2_2024_1183", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:identity/DE-06", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-06", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-06", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-07", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-07", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-07", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-07", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-07", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-08", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-08", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/DE-08", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/DE-08", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/DE-08", "target": "source:scim", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/DE-09", "target": "source:iso_27001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:identity/DE-09", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-01", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-01", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-01", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-01", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-01", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-02", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-02", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-02", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-02", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-03", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-03", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-03", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-03", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-03", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-03", "target": "source:scim", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-04", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-04", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-04", "target": "source:ietf_rfc_6749_oauth2", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-04", "target": "source:ietf_rfc_9449_dpop", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-04", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-04", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-05", "target": "source:dora", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:identity/IC-05", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:identity/IC-05", "target": "source:nis2", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:identity/IC-05", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-05", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-06", "target": "source:eidas2_2024_1183", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:identity/IC-06", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-06", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-06", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-06", "target": "source:openid_connect_core_1_0", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-06", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-07", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-07", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-07", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-07", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-07", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-08", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-08", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-08", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IC-08", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IC-08", "target": "source:w3c_did", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-01", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-01", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-01", "target": "source:eidas2_2024_1183", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:identity/IF-01", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-01", "target": "source:oidc_federation_1_0", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-01", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-01", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-02", "target": "source:fapi_2_0_security_profile", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-02", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-02", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-02", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-02", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/IF-02", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-03", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-03", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-03", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-03", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/IF-03", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-04", "target": "source:eidas2_2024_1183", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:identity/IF-04", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-04", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-04", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-04", "target": "source:w3c_did", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-05", "target": "source:eidas2_2024_1183", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:identity/IF-05", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-05", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-05", "target": "source:w3c_did", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-06", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-06", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-06", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-06", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-06", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/IF-07", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-07", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-07", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-07", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-07", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-08", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-08", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-08", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IF-08", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-08", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IF-09", "target": "source:iso_27001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:identity/IF-09", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-01", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-01", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-01", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-01", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-01", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-01", "target": "source:owasp_nhi_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-01", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-01", "target": "source:scim", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/II-02", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-02", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-02", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-02", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-02", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-02", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-03", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-03", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-03", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-03", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-03", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/II-03", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-04", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-04", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-04", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-04", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-04", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-04", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-05", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-05", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-05", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-05", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-05", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-05", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-06", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-06", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-06", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-06", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-06", "target": "source:scim", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/II-07", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-07", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-07", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-07", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-07", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/II-08", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-08", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-08", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/II-08", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/II-08", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-01", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-01", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-01", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-01", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-01", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-01", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-02", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-02", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-02", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-02", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-02", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-02", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-03", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-03", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-03", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-03", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-03", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-04", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-04", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-04", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-04", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-04", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-05", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-05", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-05", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-05", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-05", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-06", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-06", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-06", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-06", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-06", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-07", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-07", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-07", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-07", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-07", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-08", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-08", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-08", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-08", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/IM-08", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/IM-09", "target": "source:iso_27001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:identity/IM-09", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-01", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-01", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-01", "target": "source:hashicorp_vault_aar_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-01", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-01", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-01", "target": "source:owasp_nhi_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-01", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-01", "target": "source:scim", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/NI-01", "target": "source:spiffe_spire", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-02", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-02", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-02", "target": "source:hashicorp_vault_aar_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-02", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-02", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-02", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-02", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/NI-03", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-03", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-03", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-03", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-03", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-03", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-04", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-04", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-04", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-04", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-04", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-04", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-04", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/NI-05", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-05", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-05", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-05", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-05", "target": "source:ping_machine_identity_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-05", "target": "source:scim", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/NI-06", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-06", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-06", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-06", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-06", "target": "source:scim", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:identity/NI-07", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-07", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-07", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-07", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-07", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-07", "target": "source:nist_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-08", "target": "source:aws_well_arch_security_iam_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-08", "target": "source:cisa_zt", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-08", "target": "source:iso_24760", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-08", "target": "source:nist_800_63", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:identity/NI-08", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:identity/NI-09", "target": "source:iso_27001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:identity/NI-09", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KC-01", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KC-01", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KC-01", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KC-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KC-01", "target": "source:itil_4", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:knowledge/KC-02", "target": "source:aws_bedrock_knowledge_bases_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KC-02", "target": "source:google_vertex_ai_rag_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KC-03", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KC-04", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KC-05", "target": "source:anthropic_transparency", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KC-05", "target": "source:openai_system_cards_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KC-06", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KC-06", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KC-06", "target": "source:iso_27002", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KC-06", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KC-06", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KC-07", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KC-07", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KC-07", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KC-07", "target": "source:itil_4", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:knowledge/KC-08", "target": "source:microsoft_azure_ai_search_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KG-01", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KG-01", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KG-01", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KG-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KG-01", "target": "source:itil_4", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:knowledge/KG-02", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KG-02", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KG-02", "target": "source:iso_27002", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KG-02", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KG-02", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KG-03", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KG-03", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KG-03", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KG-03", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KG-04", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KG-04", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KG-04", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KG-04", "target": "source:w3c_prov", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KG-05", "target": "source:aws_bedrock_knowledge_bases_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KG-05", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KG-06", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KG-06", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KG-06", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KG-06", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KG-06", "target": "source:itil_4", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:knowledge/KG-07", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KG-07", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KG-07", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KG-07", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KG-07", "target": "source:itil_4", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:knowledge/KG-08", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KG-08", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KG-08", "target": "source:iso_27002", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KG-08", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KG-08", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KG-08", "target": "source:w3c_prov", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KI-01", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KI-01", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KI-01", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KI-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KI-02", "target": "source:aws_bedrock_knowledge_bases_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KI-02", "target": "source:openlineage_spec_1_0", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KI-03", "target": "source:microsoft_azure_ai_search_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KI-04", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KI-05", "target": "source:anthropic_transparency", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KI-05", "target": "source:google_vertex_ai_rag_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KI-06", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KI-06", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KI-06", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KI-06", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KI-06", "target": "source:itil_4", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:knowledge/KI-07", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KI-07", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KI-07", "target": "source:iso_27002", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KI-07", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KI-07", "target": "source:w3c_prov", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KI-08", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KI-08", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KI-08", "target": "source:iso_27002", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KI-08", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KI-08", "target": "source:itil_4", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:knowledge/KI-08", "target": "source:w3c_prov", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KM-01", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KM-01", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KM-01", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KM-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KM-01", "target": "source:itil_4", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:knowledge/KM-02", "target": "source:aws_bedrock_knowledge_bases_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KM-02", "target": "source:microsoft_azure_ai_search_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KM-03", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KM-04", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KM-04", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KM-04", "target": "source:iso_27002", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KM-04", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KM-05", "target": "source:google_vertex_ai_rag_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KM-06", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KM-07", "target": "source:aws_bedrock_knowledge_bases_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KM-08", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KM-08", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KM-08", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KM-08", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KM-08", "target": "source:itil_4", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "industry-framework" }, { "source": "control:knowledge/KR-01", "target": "source:aws_bedrock_knowledge_bases_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-01", "target": "source:google_vertex_ai_rag_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-02", "target": "source:anthropic_transparency", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-02", "target": "source:aws_bedrock_knowledge_bases_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-02", "target": "source:google_vertex_ai_rag_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-03", "target": "source:anthropic_transparency", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-04", "target": "source:anthropic_transparency", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-04", "target": "source:aws_bedrock_knowledge_bases_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-04", "target": "source:google_vertex_ai_rag_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-05", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-06", "target": "source:google_vertex_ai_rag_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-06", "target": "source:microsoft_azure_ai_search_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-07", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-07", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KR-07", "target": "source:iso_27002", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KR-07", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KR-07", "target": "source:w3c_prov", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KR-08", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KR-08", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KR-08", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KR-08", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KR-08", "target": "source:w3c_prov", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:knowledge/KR-09", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "industry-framework" }, { "source": "control:knowledge/KS-01", "target": "source:aws_bedrock_knowledge_bases_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KS-01", "target": "source:c2pa_spec_2_1", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KS-02", "target": "source:google_vertex_ai_rag_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KS-03", "target": "source:dama_dmbok", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KS-03", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:knowledge/KS-03", "target": "source:iso_30401", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KS-03", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "certification-standard" }, { "source": "control:knowledge/KS-04", "target": "source:databricks_unity_catalog_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KS-05", "target": "source:anthropic_transparency", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KS-06", "target": "source:microsoft_azure_ai_search_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KS-07", "target": "source:anthropic_transparency", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KS-07", "target": "source:google_vertex_ai_rag_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:knowledge/KS-08", "target": "source:aws_bedrock_knowledge_bases_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/BH-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-01", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/BH-01", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-01", "target": "source:owasp_aisvs_v1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-02", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-02", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/BH-02", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-02", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/BH-03", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/BH-03", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-03", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-03", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/BH-04", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-04", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/BH-04", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-04", "target": "source:owasp_aisvs_v1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-05", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/BH-05", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-05", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/BH-05", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-05", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/BH-06", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/BH-06", "target": "source:nist_ai_100_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "informative-reference" }, { "source": "control:model/BH-06", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-06", "target": "source:owasp_aisvs_v1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-06", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-07", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/BH-07", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-07", "target": "source:owasp_aisvs_v1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-07", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-08", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-08", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-09", "target": "source:biml_llm_ara", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:model/BH-09", "target": "source:c2pa_spec_v2", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-09", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/BH-09", "target": "source:nist_ai_100_4", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-09", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-09", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-10", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-10", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/BH-10", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-10", "target": "source:owasp_aisvs_v1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/BH-10", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/CR-01", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/CR-01", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/CR-01", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/CR-02", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/CR-02", "target": "source:sigstore_rekor", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/CR-02", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/CR-03", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/CR-03", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/CR-03", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/CR-04", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/CR-04", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/CR-04", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/CR-04", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/CR-05", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/CR-05", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/CR-06", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/CR-06", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/CR-07", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/CR-07", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/CR-08", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-01", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/EV-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-01", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-01", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/EV-02", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/EV-02", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-02", "target": "source:iso_42005_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-02", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-02", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-03", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/EV-03", "target": "source:gdm_fsf_v3_1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-03", "target": "source:openai_preparedness_v2", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-04", "target": "source:bsi_ai_fundamentals", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/EV-04", "target": "source:etsi_gr_sai_005", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-04", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/EV-04", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/EV-04", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-04", "target": "source:owasp_aisvs_v1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-04", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-05", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/EV-05", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-05", "target": "source:iso_42005_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-05", "target": "source:nist_ai_600_1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-05", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-06", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-06", "target": "source:nist_ai_600_1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-06", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-06", "target": "source:owasp_aisvs_v1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-07", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/EV-07", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-07", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-07", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-07", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/EV-08", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/EV-08", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-08", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-08", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/EV-09", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/EV-09", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-09", "target": "source:iso_42005_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-09", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-09", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/EV-10", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/EV-10", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-10", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-10", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/EV-11", "target": "source:etsi_gr_sai_005", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-11", "target": "source:nist_ai_100_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "informative-reference" }, { "source": "control:model/EV-12", "target": "source:etsi_gr_sai_005", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/EV-12", "target": "source:nist_ai_100_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "informative-reference" }, { "source": "control:model/EV-13", "target": "source:nist_ai_100_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "informative-reference" }, { "source": "control:model/LI-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-01", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-01", "target": "source:owasp_aisvs_v1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-01", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/LI-02", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-02", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/LI-02", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-02", "target": "source:owasp_aisvs_v1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-03", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-03", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/LI-03", "target": "source:ncsc_cisa_secure_ai_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/LI-03", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-03", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/LI-04", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/LI-04", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-04", "target": "source:mitchell_2019", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/LI-04", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-04", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/LI-05", "target": "source:biml_llm_ara", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:model/LI-05", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-05", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-05", "target": "source:owasp_aisvs_v1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-06", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/LI-06", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-06", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-07", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/LI-07", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-07", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-08", "target": "source:csa_aicm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-08", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-08", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-08", "target": "source:owasp_aisvs_v1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-09", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/LI-09", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-09", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-10", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/LI-10", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/LI-10", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-01", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/OA-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-01", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-01", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/OA-02", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/OA-02", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-02", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-03", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/OA-03", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-03", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-03", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/OA-04", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-04", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-05", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/OA-05", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-05", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/OA-06", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/OA-06", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-06", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-06", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/OA-07", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/OA-07", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-07", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-08", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/OA-08", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/OA-08", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/OA-08", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-01", "target": "source:biml_llm_ara", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:model/TG-01", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/TG-01", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-01", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-02", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/TG-02", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-02", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-02", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/TG-03", "target": "source:ccpa", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/TG-03", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/TG-03", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/TG-03", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-03", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/TG-04", "target": "source:bsi_ai_fundamentals", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/TG-04", "target": "source:etsi_gr_sai_005", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-04", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-04", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/TG-04", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-04", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-05", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-05", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-05", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/TG-06", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/TG-06", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/TG-06", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-06", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-07", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/TG-07", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-07", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:model/TG-07", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-07", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:model/TG-07", "target": "source:sr26_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:model/TG-08", "target": "source:ccpa", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/TG-08", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/TG-08", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:model/TG-08", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DC-01", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-01", "target": "source:china_pipl_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-01", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-01", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-01", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DC-01", "target": "source:lgpd", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-01", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DC-01", "target": "source:plot4ai", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-01", "target": "source:quebec_law_25_2021", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-02", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-02", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-02", "target": "source:edpb_opinion_28_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:privacy/DC-02", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-02", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-03", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-03", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-03", "target": "source:dpdp", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-03", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-03", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-03", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-04", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-04", "target": "source:edpb_opinion_28_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:privacy/DC-04", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-04", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DC-04", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-04", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-05", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-05", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-05", "target": "source:dpdp", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-05", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-05", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-05", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-06", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-06", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-06", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-06", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DC-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-06", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DC-07", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-07", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-07", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-07", "target": "source:uk_duaa_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-08", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-08", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-08", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DC-08", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DC-08", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-08", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DC-09", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DC-09", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DC-09", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DG-01", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-01", "target": "source:eu_data_gov_act_2022_868", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-01", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-01", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-01", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DG-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-01", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DG-01", "target": "source:plot4ai", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-02", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-02", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-02", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-02", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-02", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DG-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-02", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-03", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-03", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-03", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-03", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DG-03", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-03", "target": "source:uk_duaa_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-04", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-04", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-04", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-04", "target": "source:uk_duaa_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-05", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-05", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-05", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-05", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-05", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-06", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-06", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-06", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-06", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-06", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-06", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DG-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-07", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-07", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-07", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-07", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-07", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DG-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-07", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-08", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-08", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DG-08", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DG-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DG-08", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DP-01", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-01", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DP-01", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-01", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DP-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-01", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DP-01", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-02", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-02", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DP-02", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DP-02", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-02", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DP-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-03", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-03", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-03", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DP-03", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-03", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DP-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-03", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DP-04", "target": "source:edpb_opinion_28_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:privacy/DP-04", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DP-04", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-04", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DP-04", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-05", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-05", "target": "source:edpb_opinion_28_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:privacy/DP-05", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DP-05", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-05", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DP-06", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-06", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DP-06", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DP-06", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-06", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DP-07", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-07", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DP-07", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-07", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DP-07", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-08", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-08", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DP-08", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DP-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DP-08", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DS-01", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-01", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-01", "target": "source:dpdp", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-01", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-01", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-01", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-02", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-02", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-02", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-02", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DS-02", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-03", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-03", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-03", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-03", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-03", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-03", "target": "source:uk_duaa_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-04", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-04", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-04", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-04", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-04", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DS-04", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-04", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-05", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-05", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-05", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-05", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-05", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-06", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-06", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-06", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DS-06", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-06", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-07", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-07", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-07", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-07", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-07", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-07", "target": "source:uk_duaa_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-08", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-08", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/DS-08", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/DS-08", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/DS-08", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/DS-08", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-01", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-01", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-01", "target": "source:cnil_ai_guidance_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:privacy/PC-01", "target": "source:dpdp", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-01", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-01", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-01", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-02", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-02", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-02", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-02", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/PC-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-02", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/PC-02", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-03", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-03", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-03", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-03", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-03", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-03", "target": "source:uk_duaa_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-04", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-04", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-04", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-04", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/PC-04", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-04", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/PC-05", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-05", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-05", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-05", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/PC-06", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-06", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-06", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-06", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-06", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-07", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-07", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-07", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/PC-07", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-08", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-08", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-08", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-08", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PC-08", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/PC-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PC-08", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-01", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-01", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PM-01", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PM-01", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-01", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-01", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/PM-02", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-02", "target": "source:edpb_opinion_28_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:privacy/PM-02", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PM-02", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-02", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-02", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/PM-03", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-03", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PM-03", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-03", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/PM-03", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-03", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/PM-04", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-04", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PM-04", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/PM-04", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/PM-04", "target": "source:okta_nhi_agent_identity_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-04", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-05", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-05", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PM-05", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-05", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-05", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/PM-06", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-06", "target": "source:ccpa_cpra_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PM-06", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PM-06", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-06", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-07", "target": "source:anthropic_privacy_policy_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-07", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-07", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PM-07", "target": "source:google_saif_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-07", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/PM-07", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:privacy/PM-07", "target": "source:openai_privacy_dpa_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-08", "target": "source:aws_privacy_data_governance_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-08", "target": "source:gdpr", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:privacy/PM-08", "target": "source:iso_27701", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:privacy/PM-08", "target": "source:microsoft_rai_standard_v2_2022", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:privacy/PM-08", "target": "source:nist_pf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:resilience/FO-01", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-01", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-02", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-02", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-02", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-03", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-04", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-05", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-05", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-06", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-06", "target": "source:cloudflare_resilience_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-06", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-07", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-07", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-08", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-08", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/FO-08", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-01", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-01", "target": "source:cloudflare_resilience_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-01", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-01", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-01", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-02", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-02", "target": "source:cloudflare_resilience_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-02", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-02", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-02", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-03", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-03", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-03", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-03", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-04", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-04", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-04", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-04", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-05", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-05", "target": "source:cloudflare_resilience_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-05", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-05", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-05", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-06", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-06", "target": "source:cloudflare_resilience_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-06", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-06", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-06", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-07", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-07", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-07", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-07", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-08", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-08", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-08", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RE-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-01", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-01", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-01", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-02", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-02", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-02", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-02", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-03", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-03", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-04", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-04", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-04", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-04", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-05", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-05", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-06", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-06", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-06", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-06", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-07", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-07", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-07", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-08", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-08", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RG-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-01", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-01", "target": "source:cloudflare_resilience_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-01", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-01", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-01", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-02", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-02", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-02", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-02", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-03", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-03", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-03", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-04", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-04", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-04", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-05", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-05", "target": "source:cloudflare_resilience_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-05", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-05", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-05", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-06", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-06", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-06", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-06", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-07", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-07", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-07", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-08", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-08", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-08", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RO-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-01", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-01", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-01", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-01", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-02", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-02", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-02", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-02", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-03", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-03", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-03", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-03", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-04", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-04", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-04", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-05", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-05", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-05", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-05", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-06", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-06", "target": "source:cloudflare_resilience_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-06", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-06", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-06", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-07", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-07", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-07", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-07", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RP-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-01", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-01", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-01", "target": "source:enisa_ai_cybersec_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-01", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-01", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-01", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-02", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-02", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-02", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-02", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-02", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-03", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-03", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-03", "target": "source:cloudflare_resilience_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-03", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-03", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-03", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-04", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-04", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-04", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-04", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-04", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-05", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-05", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-05", "target": "source:cloudflare_resilience_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-05", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-05", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-05", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-06", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-06", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-06", "target": "source:cloudflare_resilience_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-06", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-06", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-06", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-07", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-07", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-07", "target": "source:cloudflare_resilience_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-07", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-07", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-07", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-08", "target": "source:anthropic_rsp", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-08", "target": "source:aws_well_arch_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-08", "target": "source:google_sre_workbook_2018", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-08", "target": "source:microsoft_azure_reliability_2024", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:resilience/RV-08", "target": "source:openai_preparedness", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-01", "target": "source:agentdojo", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-01", "target": "source:anthropic_attack_navigator", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-01", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-01", "target": "source:ms_failure_taxonomy", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-01", "target": "source:ms_pyrit", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-01", "target": "source:owasp_finbot_ctf", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-01", "target": "source:owasp_ml_top10", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-01", "target": "source:promptfoo", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-02", "target": "source:cisa_sbom_ai", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/AS-02", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-02", "target": "source:ms_agent_governance_toolkit", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-02", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-03", "target": "source:deepmind_ai_control", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-03", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:security/AS-04", "target": "source:openai_bug_bounty", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-05", "target": "source:anthropic_glasswing", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-05", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-05", "target": "source:deepmind_agi_safety", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-05", "target": "source:openai_preparedness_v2", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-06", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-06", "target": "source:cisa_sbom_ai", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/AS-06", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-06", "target": "source:google_saif2", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-06", "target": "source:openssf_model_signing", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-06", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-07", "target": "source:biv_skills", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-07", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-07", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-08", "target": "source:cosai_oasis", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/AS-08", "target": "source:deepmind_ai_control", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/AS-08", "target": "source:ms_copilot_studio_governance", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-01", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-01", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-01", "target": "source:csa_maestro", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-01", "target": "source:firecracker", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-01", "target": "source:google_saif2", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-01", "target": "source:gvisor", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-01", "target": "source:ms_mxc", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-01", "target": "source:plaskett_coding_agent_security", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-02", "target": "source:anthropic_mcp", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/EC-02", "target": "source:aws_egress_domains", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-02", "target": "source:claude_sandbox_bypass", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-02", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-02", "target": "source:csa_maestro", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-03", "target": "source:agent_security_bench", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-03", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-03", "target": "source:containment_gap", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-03", "target": "source:ms_failure_taxonomy", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-03", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-04", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-04", "target": "source:ms_agent_governance_toolkit", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-04", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-04", "target": "source:plaskett_coding_agent_security", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-05", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-06", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-06", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-07", "target": "source:auth0_genai", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-07", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-07", "target": "source:databricks_dasf3", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-07", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-07", "target": "source:ms_ifc_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-07", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-07", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-08", "target": "source:containment_gap", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-08", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-08", "target": "source:gitguardian_mcp_secrets", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-08", "target": "source:imda_mgf", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/EC-08", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-09", "target": "source:containment_gap", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-09", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-09", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-09", "target": "source:plaskett_coding_agent_security", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/EC-10", "target": "source:aws_scoping_matrix", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-10", "target": "source:cisa_agentic", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/EC-10", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-11", "target": "source:owasp_aisvs", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/EC-12", "target": "source:cisa_kev", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/EC-12", "target": "source:nist_800_53", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/GV-01", "target": "source:auth0_genai", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/GV-01", "target": "source:aws_scoping_matrix", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-01", "target": "source:cisa_agentic", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/GV-01", "target": "source:ms_agent_governance_toolkit", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-02", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-02", "target": "source:databricks_dasf3", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-02", "target": "source:deepmind_ai_control", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/GV-02", "target": "source:did_vc", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/GV-02", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:security/GV-02", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:security/GV-02", "target": "source:ncsc_cisa_secure_ai_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/GV-03", "target": "source:csa_maestro", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-03", "target": "source:databricks_dasf3", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-03", "target": "source:hashicorp_vault_aar_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "best-practice" }, { "source": "control:security/GV-04", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-04", "target": "source:imda_mgf", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/GV-04", "target": "source:ms_agent_governance_toolkit", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-04", "target": "source:ms_ifc_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/GV-04", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-05", "target": "source:aws_scoping_matrix", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-05", "target": "source:cosai_oasis", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-05", "target": "source:csa_agent_survey", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-05", "target": "source:csa_aicm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-05", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-05", "target": "source:imda_mgf", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/GV-05", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:security/GV-05", "target": "source:iso_ai_series", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:security/GV-05", "target": "source:nist_ai_600_1", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/GV-05", "target": "source:nist_caisi", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/GV-05", "target": "source:nist_cosais", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/GV-05", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/GV-06", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-07", "target": "source:openai_governing_agentic", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/GV-07", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-08", "target": "source:databricks_dasf3", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-08", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-09", "target": "source:cisa_agentic", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/GV-09", "target": "source:csa_agent_survey", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-09", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:security/GV-10", "target": "source:imda_mgf", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/GV-10", "target": "source:iso_42001", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "certification-standard" }, { "source": "control:security/GV-10", "target": "source:nist_rmf", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/GV-10", "target": "source:openai_governing_agentic", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/GV-11", "target": "source:aws_scoping_matrix", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/GV-11", "target": "source:cisa_agentic", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/GV-11", "target": "source:ms_failure_taxonomy", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/IA-01", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/IA-01", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-01", "target": "source:did_vc", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/IA-01", "target": "source:ms_entra_agent_id", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-01", "target": "source:nist_ai_rmf_playbook", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/IA-01", "target": "source:nist_nccoe_agent_id", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/IA-01", "target": "source:owasp_nhi_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-01", "target": "source:ping_identity_ai", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-01", "target": "source:spiffe_spire", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/IA-02", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/IA-02", "target": "source:auth0_genai", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/IA-02", "target": "source:csa_agent_survey", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-02", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-02", "target": "source:imda_mgf", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/IA-02", "target": "source:oauth21", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/IA-02", "target": "source:oidc_ciba", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/IA-02", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/IA-02", "target": "source:owasp_nhi_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-02", "target": "source:ping_identity_ai", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-03", "target": "source:auth0_genai", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/IA-03", "target": "source:cisa_agentic", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/IA-03", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-03", "target": "source:hashicorp_vault_aar_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "best-practice" }, { "source": "control:security/IA-03", "target": "source:imda_mgf", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/IA-03", "target": "source:oidc_ciba", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/IA-03", "target": "source:okta_cross_app_access", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-03", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/IA-04", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/IA-04", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-04", "target": "source:google_secure_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/IA-04", "target": "source:hashicorp_vault_aar_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "best-practice" }, { "source": "control:security/IA-04", "target": "source:ngac", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/IA-04", "target": "source:nist_nccoe_agent_id", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/IA-04", "target": "source:ping_identity_ai", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-05", "target": "source:cisa_agentic", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/IA-05", "target": "source:crowdstrike_aidr", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-05", "target": "source:csa_agent_survey", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-05", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-05", "target": "source:ms_copilot_studio_governance", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/IA-06", "target": "source:a2a_spec", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/IA-06", "target": "source:did_vc", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/IA-06", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:security/IA-06", "target": "source:eu_ai_act", "type": "cites", "provenance": { "source": "corpus", "relationship": "normative_requirement", "section": null }, "confidence": "binding-law" }, { "source": "control:security/IA-06", "target": "source:openid", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/PT-01", "target": "source:a2a_spec", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/PT-01", "target": "source:beyondidentity_ceros", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-01", "target": "source:did_vc", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/PT-02", "target": "source:anthropic_gtg1002", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/PT-02", "target": "source:anthropic_mcp", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/PT-02", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/PT-02", "target": "source:crowdstrike_aidr", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-02", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-02", "target": "source:mcp_authorization", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/PT-02", "target": "source:ms_agent_governance_toolkit", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-02", "target": "source:ms_ifc_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/PT-02", "target": "source:plaskett_coding_agent_security", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/PT-03", "target": "source:cisa_sbom_ai", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/PT-03", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-03", "target": "source:ms_agent_governance_toolkit", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-03", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-03", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-03", "target": "source:owasp_nhi_2025", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-04", "target": "source:anthropic_mcp", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/PT-04", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/PT-04", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-04", "target": "source:google_saif2", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-04", "target": "source:ms_ifc_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/PT-04", "target": "source:owasp_agentic_threats", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-05", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-05", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-06", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-06", "target": "source:owasp_agentic_threats", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-06", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-06", "target": "source:pisanitizer", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/PT-07", "target": "source:anthropic_mcp", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "voluntary-standard" }, { "source": "control:security/PT-07", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-07", "target": "source:owasp_agentic_threats", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-07", "target": "source:owasp_asi_2026", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-08", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-08", "target": "source:openai_agent_builder_safety", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/PT-08", "target": "source:owasp_agentic_threats", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/PT-08", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-01", "target": "source:crowdstrike_aidr", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-01", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-01", "target": "source:csa_maestro", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-01", "target": "source:imda_mgf", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/RT-02", "target": "source:anthropic_zt_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-02", "target": "source:crowdstrike_aidr", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-02", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-02", "target": "source:garak", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-02", "target": "source:google_saif2", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-02", "target": "source:ms_pyrit", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-02", "target": "source:nist_ai_100_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "informative-reference" }, { "source": "control:security/RT-02", "target": "source:openai_agent_builder_safety", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-02", "target": "source:owasp_llm10", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-02", "target": "source:plaskett_coding_agent_security", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-03", "target": "source:anthropic_glasswing", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-03", "target": "source:deepmind_ai_control", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-03", "target": "source:imda_mgf", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/RT-04", "target": "source:crowdstrike_aidr", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-04", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-04", "target": "source:deepmind_ai_control", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-04", "target": "source:nist_ai_rmf_playbook", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/RT-04", "target": "source:openai_governing_agentic", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-05", "target": "source:crowdstrike_aidr", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-05", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-05", "target": "source:ms_ifc_agents", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-05", "target": "source:ping_identity_ai", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-06", "target": "source:anthropic_attack_navigator", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-06", "target": "source:anthropic_gtg1002", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-06", "target": "source:csa_aismm", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-06", "target": "source:mitre_atlas", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-06", "target": "source:mitre_attack", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-06", "target": "source:ncsc_cisa_secure_ai_2023", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "supervisory-guidance" }, { "source": "control:security/RT-06", "target": "source:nist_ai_100_2", "type": "cites", "provenance": { "source": "corpus", "relationship": "supporting_guidance", "section": null }, "confidence": "informative-reference" }, { "source": "control:security/RT-07", "target": "source:csa_maestro", "type": "cites", "provenance": { "source": "corpus", "relationship": "implementation_pattern", "section": null }, "confidence": "industry-framework" }, { "source": "control:security/RT-07", "target": "source:deepmind_ai_control", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-08", "target": "source:anthropic_glasswing", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "control:security/RT-08", "target": "source:deepmind_ai_control", "type": "cites", "provenance": { "source": "corpus", "relationship": "informative_reference", "section": null }, "confidence": "best-practice" }, { "source": "clause:acm_ethics:\u00a71.1", "target": "clause:eu_ai_act:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1", "target": "clause:eu_charter:1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1", "target": "clause:ieee_7000:Clause 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1", "target": "clause:oecd_ai_principles:Principle 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1", "target": "clause:un_ethics_ai:\u00b635\u2013\u00b636 (Human oversight and determination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1\u20131.4", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1\u20131.4", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1\u20131.4", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1\u20131.4", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1\u20131.4", "target": "clause:iso_42001:5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1\u20131.4", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1\u20131.4", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1\u20131.4", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1\u20131.4", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1\u20131.4", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1\u20131.4", "target": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1, \u00a71.2, \u00a72.5", "target": "clause:eu_ai_act:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1, \u00a71.2, \u00a72.5", "target": "clause:eu_charter:1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1, \u00a71.2, \u00a72.5", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 alignment with wide", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1, \u00a71.2, \u00a72.5", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1, \u00a71.2, \u00a72.5", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1, \u00a71.2, \u00a72.5", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1, \u00a71.2, \u00a72.5", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1, \u00a71.2, \u00a72.5", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1, \u00a71.2, \u00a72.5", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.1, \u00a71.2, \u00a72.5", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:anthropic_rsp:Capability Thresholds (threshold-triggered evaluation and re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:eu_charter:21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:ibm_ai_fairness:Bias mitigation algorithms (reweighing, adversarial debiasin", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:ieee_7000:Clause 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms; Llama Acceptabl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2, \u00a72.5", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2, \u00a72.5", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2, \u00a72.5", "target": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2, \u00a72.5", "target": "clause:iso_42001:6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2, \u00a72.5", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2, \u00a72.5", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2, \u00a72.5", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2, \u00a72.5", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2, \u00a72.5", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2, \u00a72.5", "target": "clause:nist_rmf:GOVERN 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2, \u00a72.5", "target": "clause:oecd_ai_principles:Principle 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.2, \u00a72.5", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.4", "target": "clause:eu_ai_act:Annex IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.4", "target": "clause:ibm_ai_fairness:Fairness metric taxonomy (~70 metrics)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.4", "target": "clause:ieee_7000:\u00a77.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.4", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a71.4", "target": "clause:nyc_ll144:\u00a720-871 (Bias audit requirements)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.3, \u00a73.7", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.3, \u00a73.7", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.3, \u00a73.7", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.3, \u00a73.7", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.3, \u00a73.7", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.3, \u00a73.7", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.3, \u00a73.7", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.3, \u00a73.7", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.3, \u00a73.7", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.3, \u00a73.7", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:ieee_7000:Clause 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:nist_rmf:MEASURE 2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a72.5", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:ieee_7000:Clause 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:nist_rmf:MEASURE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:acm_ethics:\u00a73.7", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:aisvs:C3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:eu_ai_act:55", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:llm10:LLM09:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:mitre:AML.T0043", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:nist_ai_600_1:CBRN", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:nist_ai_600_1:CONFABULATION", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:nist_rmf:MEASURE-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:nist_rmf:MEASURE-2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:owasp_aitg:AITG-INF-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-02", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-04", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-04", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-04", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-04", "target": "clause:nist_rmf:GOVERN-1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-04", "target": "clause:nist_rmf:MEASURE-2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-04", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:A&A-04", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:AIS-09", "target": "clause:eu_ai_act:55", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:AIS-09", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:AIS-09", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:AIS-09", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:AIS-09", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:AIS-09", "target": "clause:owasp_aitg:AITG-APP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:CCC-02", "target": "clause:aisvs:C3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:CCC-02", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:CCC-02", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:CCC-02", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:CCC-02", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:CCC-02", "target": "clause:mitre:AML.T0043", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:CCC-02", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:CCC-02", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:CCC-02", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-02", "target": "clause:eu_ai_act:16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-02", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-02", "target": "clause:nist_rmf:GOVERN-1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-12", "target": "clause:aisvs:C1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-12", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-12", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-12", "target": "clause:llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-12", "target": "clause:mitre:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-12", "target": "clause:nist_ai_600_1:DATA-PRIVACY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-12", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-12", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-12", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-12", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-16", "target": "clause:aisvs:C1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-16", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-16", "target": "clause:iso_42001:A.7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-16", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-16", "target": "clause:mitre:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-16", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-16", "target": "clause:nist_rmf:MEASURE-2.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-16", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-16", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-16", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-16", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-20", "target": "clause:eu_ai_act:50", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-20", "target": "clause:iso_42001:A.8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-20", "target": "clause:nist_ai_600_1:INFO-INTEGRITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-20", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-20", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-21", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-21", "target": "clause:iso_42001:A.7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-21", "target": "clause:nist_ai_100_2:NISTAML.023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-21", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-21", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-21", "target": "clause:owasp_aitg:AITG-INF-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-23", "target": "clause:aisvs:C1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-23", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-23", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-23", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-23", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-23", "target": "clause:mitre:AML.T0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-23", "target": "clause:nist_rmf:MAP-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-23", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-23", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:DSP-23", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-01", "target": "clause:aisvs:C3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-01", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-01", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-01", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-01", "target": "clause:mitre:AML.T0043", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-01", "target": "clause:nist_rmf:MANAGE-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-01", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-01", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-01", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-02", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-02", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-02", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-02", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-02", "target": "clause:nist_rmf:GOVERN-1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-02", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-02", "target": "clause:owasp_aitg:AITG-APP-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-06", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-06", "target": "clause:iso_42001:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-06", "target": "clause:nist_rmf:GOVERN-2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-06", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-06", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-07", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-07", "target": "clause:iso_42001:4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-07", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-07", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-07", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-10", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-10", "target": "clause:eu_ai_act:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-10", "target": "clause:iso_42001:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-10", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-10", "target": "clause:nist_rmf:GOVERN-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-10", "target": "clause:nist_rmf:MAP-1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-10", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-10", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-10", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:aisvs:C1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:llm10:LLM09:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:mitre:AML.T0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:nist_ai_600_1:HUMAN-AI-CONFIG", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:nist_rmf:MEASURE-2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:owasp_aitg:AITG-APP-10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-11", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-13", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-13", "target": "clause:iso_42001:A.8.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-13", "target": "clause:llm10:LLM09:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-13", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-13", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-13", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-13", "target": "clause:owasp_aitg:AITG-APP-14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-15", "target": "clause:eu_ai_act:14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-15", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-15", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-15", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-15", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-15", "target": "clause:nist_rmf:GOVERN-3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-15", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-15", "target": "clause:owasp_aitg:AITG-APP-13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:GRC-15", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-07", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-07", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-07", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-07", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-07", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-07", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-10", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-10", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-10", "target": "clause:nist_rmf:GOVERN-1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-10", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-14", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-14", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-14", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-14", "target": "clause:nist_rmf:MEASURE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-14", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-14", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:LOG-14", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-03", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-03", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-03", "target": "clause:iso_42001:A.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-03", "target": "clause:llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-03", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-03", "target": "clause:nist_rmf:GOVERN-2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-03", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-03", "target": "clause:owasp_aisvs:C1.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-03", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-05", "target": "clause:aisvs:C3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-05", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-05", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-05", "target": "clause:nist_rmf:MEASURE-2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-05", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-10", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-10", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-10", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-10", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-10", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-10", "target": "clause:nist_rmf:MEASURE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-10", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-10", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-10", "target": "clause:owasp_aisvs:C11.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-10", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:MDS-10", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-01", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-01", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-01", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-01", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-03", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-03", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-03", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-03", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-03", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-07", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-07", "target": "clause:iso_42001:A.8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-07", "target": "clause:nist_rmf:GOVERN-4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-07", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:SEF-07", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:aisvs:C1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:mitre:AML.T0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:nist_ai_100_2:NISTAML.012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:nist_ai_100_2:NISTAML.013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:owasp_aitg:AITG-MOD-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:owasp_ml_top10:ML02:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-01", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-08", "target": "clause:aisvs:C1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-08", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-08", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-08", "target": "clause:llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-08", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-08", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-08", "target": "clause:mitre:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-08", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-08", "target": "clause:nist_rmf:GOVERN-6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-08", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-08", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:STA-08", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-07", "target": "clause:aisvs:C11.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-07", "target": "clause:eu_ai_act:55", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-07", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-07", "target": "clause:llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-07", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-07", "target": "clause:mitre:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-07", "target": "clause:nist_ai_100_2:NISTAML.022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-07", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-07", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-07", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-07", "target": "clause:owasp_aitg:AITG-MOD-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-07", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-08", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-08", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-08", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-08", "target": "clause:nist_rmf:MEASURE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-08", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-08", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-13", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-13", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-13", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-13", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-13", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-13", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aicm:TVM-13", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:iso_42001:A.7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:mitre:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:mitre:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:nist_ai_600_1:DATA-PRIVACY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:nist_rmf:GOVERN-6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:nist_rmf:MEASURE-2.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.1", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:mitre:AML.T0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:nist_ai_100_2:NISTAML.012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:nist_ai_100_2:NISTAML.013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:nist_rmf:MAP-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:nist_rmf:MEASURE-2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:owasp_aitg:AITG-MOD-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:owasp_ml_top10:ML02:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C1.3", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C11.1", "target": "clause:eu_ai_act:55", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C11.1", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C11.1", "target": "clause:llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C11.1", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C11.1", "target": "clause:mitre:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C11.1", "target": "clause:nist_ai_100_2:NISTAML.022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C11.1", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C11.1", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C11.1", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C11.1", "target": "clause:owasp_aitg:AITG-MOD-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C11.1", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.1", "target": "clause:iso_42001:A.6.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.1", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.1", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.1", "target": "clause:mitre:AML.T0044", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.1", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.1", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.1", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.1", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.1", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:llm10:LLM09:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:mitre:AML.T0043", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:nist_ai_600_1:CONFABULATION", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:nist_rmf:MANAGE-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:nist_rmf:MEASURE-2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:nist_rmf:MEASURE-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C3.2", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C6.2", "target": "clause:iso_42001:A.6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C6.2", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C6.2", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C6.2", "target": "clause:mitre:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C6.2", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C6.2", "target": "clause:nist_rmf:MAP-4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C6.2", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aisvs:C6.2", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data controls \u2014 configuration verification", "target": "clause:gdpr:7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data controls \u2014 configuration verification", "target": "clause:iso_27701:7.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data controls \u2014 configuration verification", "target": "clause:nist_pf:CT.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data controls \u2014 configuration verification", "target": "clause:okta_iam:Okta real-time directory synchronization \u2014 consent state pro", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data controls \u2014 configuration verification", "target": "clause:openai_privacy:OpenAI API usage monitoring \u2014 data control configuration aud", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data controls \u2014 configuration verification", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention controls", "target": "clause:aws_privacy:AWS data lifecycle management \u2014 S3 Lifecycle and RDS retenti", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention controls", "target": "clause:ccpa:1798.100", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention controls", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention controls", "target": "clause:iso_27701:7.4.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention controls", "target": "clause:microsoft_rai:Microsoft Purview Data Lifecycle Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention controls", "target": "clause:openai_privacy:OpenAI API data retention policy \u2014 30-day default", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention controls", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention defaults", "target": "clause:aws_privacy:AWS Lake Formation \u00a7Column/Row-Level Security for Minimizati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention defaults", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention defaults", "target": "clause:google_saif:User Data Management \u2014 mitigates Excessive Data Handling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention defaults", "target": "clause:iso_27701:7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention defaults", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention defaults", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API data retention defaults", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API log retention controls", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API log retention controls", "target": "clause:google_saif:User Data Management \u2014 telemetry and log data", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API log retention controls", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction data governan", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API log retention controls", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API log retention controls", "target": "clause:openai_privacy:OpenAI API log retention \u2014 30-day abuse monitoring window", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic API log retention controls", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic compliance artifacts \u2014 SOC 2 Type II, GDPR DPA, HI", "target": "clause:aws_privacy:AWS ISO/IEC 42001 accredited certification \u2014 AI services", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic compliance artifacts \u2014 SOC 2 Type II, GDPR DPA, HI", "target": "clause:gdpr:42", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic compliance artifacts \u2014 SOC 2 Type II, GDPR DPA, HI", "target": "clause:iso_27701:PIMS certification (standard as a whole)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic compliance artifacts \u2014 SOC 2 Type II, GDPR DPA, HI", "target": "clause:microsoft_rai:Azure AI compliance certifications \u2014 ISO 27001, SOC 2, ISO 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic compliance artifacts \u2014 SOC 2 Type II, GDPR DPA, HI", "target": "clause:nist_pf:GV.MT-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic compliance artifacts \u2014 SOC 2 Type II, GDPR DPA, HI", "target": "clause:openai_privacy:OpenAI compliance certifications \u2014 SOC 2, ISO 27001, ISO 420", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 processing on documente", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 processing on documente", "target": "clause:iso_27701:7.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 processing on documente", "target": "clause:nist_pf:CT.DM-P7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 processing on documente", "target": "clause:okta_iam:Okta Workflows \u2014 event-driven lifecycle automation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 processing on documente", "target": "clause:openai_privacy:OpenAI API data controls \u2014 retention and training configurat", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 security incident notif", "target": "clause:aws_privacy:AWS Security Incident Response Guide", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 security incident notif", "target": "clause:ccpa:1798.150", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 security incident notif", "target": "clause:gdpr:33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 security incident notif", "target": "clause:gdpr:34", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 security incident notif", "target": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 security incident notif", "target": "clause:iso_27701:6.13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 security incident notif", "target": "clause:microsoft_rai:Microsoft Products and Services DPA \u2014 security incident noti", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 Standard Contractual Cl", "target": "clause:aws_privacy:AWS GDPR compliance whitepaper \u2014 data transfer mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 Standard Contractual Cl", "target": "clause:gdpr:46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 Standard Contractual Cl", "target": "clause:microsoft_rai:Microsoft EU Data Boundary Commitment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 Standard Contractual Cl", "target": "clause:nist_pf:ID.DE-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 Standard Contractual Cl", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional storage options", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 Standard Contractual Cl", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 Standard Contractual Cl", "target": "clause:uk_duaa:international transfer provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "target": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "target": "clause:google_saif:Insecure Integrated Component risk", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "target": "clause:iso_27701:8.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "target": "clause:iso_27701:8.5.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "target": "clause:nist_pf:ID.DE-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "target": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 training data commitmen", "target": "clause:ccpa:1798.135", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 training data commitmen", "target": "clause:dpdp:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 training data commitmen", "target": "clause:gdpr:7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 training data commitmen", "target": "clause:okta_iam:Okta Universal Directory \u2014 custom profile attributes for con", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 training data commitmen", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 customer content and train", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 training data commitmen", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum (DPA)", "target": "clause:aws_privacy:AWS Data Processing Addendum (GDPR DPA)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum (DPA)", "target": "clause:ccpa:1798.140", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum (DPA)", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum (DPA)", "target": "clause:iso_27701:8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum (DPA)", "target": "clause:microsoft_rai:Microsoft Product Terms and Data Processing Agreement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum (DPA)", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum (DPA)", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum (DPA)", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum (DPA)", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum (DPA)", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum and compliance documentat", "target": "clause:aws_privacy:AWS Artifact \u2014 jurisdiction-organized compliance reports and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum and compliance documentat", "target": "clause:ccpa:1798.135", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum and compliance documentat", "target": "clause:gdpr:30", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum and compliance documentat", "target": "clause:microsoft_rai:Microsoft EU Data Boundary and Jurisdiction-Specific DPAs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum and compliance documentat", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum and compliance documentat", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Data Processing Addendum and compliance documentat", "target": "clause:uk_duaa:Data protection complaints procedure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Privacy Policy and Consumer Terms \u2014 training data", "target": "clause:edpb_opinion_28_2024:3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Privacy Policy and Consumer Terms \u2014 training data", "target": "clause:gdpr:7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Privacy Policy and Consumer Terms \u2014 training data", "target": "clause:nist_pf:CT.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Privacy Policy and Consumer Terms \u2014 training data", "target": "clause:okta_iam:Okta API Access Management \u2014 OAuth scopes and consent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Privacy Policy and Consumer Terms \u2014 training data", "target": "clause:openai_privacy:OpenAI Enterprise Privacy \u2014 customer responsibility for lawf", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Privacy Policy and Consumer Terms \u2014 training data", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic privacy support channels", "target": "clause:ccpa:1798.135", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic privacy support channels", "target": "clause:dpdp:ch. III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic privacy support channels", "target": "clause:gdpr:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic privacy support channels", "target": "clause:okta_iam:Okta + DataGrail integration \u2014 automated DSR intake", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic privacy support channels", "target": "clause:openai_privacy:OpenAI privacy request channels (privacy.openai.com / dsar@o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment capabi", "target": "clause:aws_privacy:AWS GDPR compliance resources \u2014 customer DPIA support", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment capabi", "target": "clause:eu_ai_act:27", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment capabi", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment capabi", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment capabi", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Impact Assessment req", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment risk a", "target": "clause:aws_privacy:AWS ISO/IEC 42001 certification \u2014 AI management system impac", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment risk a", "target": "clause:eu_ai_act:27", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment risk a", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment risk a", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment risk a", "target": "clause:microsoft_rai:Microsoft Responsible AI Impact Assessment template and guid", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic SOC 2 Type II and GDPR DPA \u2014 vendor assurance arti", "target": "clause:aws_privacy:AWS ISO/IEC 42001 certification and SOC 2 \u2014 vendor assurance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic SOC 2 Type II and GDPR DPA \u2014 vendor assurance arti", "target": "clause:eu_ai_act:47", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic SOC 2 Type II and GDPR DPA \u2014 vendor assurance arti", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic SOC 2 Type II and GDPR DPA \u2014 vendor assurance arti", "target": "clause:iso_27701:5.8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic SOC 2 Type II and GDPR DPA \u2014 vendor assurance arti", "target": "clause:microsoft_rai:Azure AI certifications \u2014 ISO 27001, SOC 2, ISO 42001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic SOC 2 Type II and GDPR DPA \u2014 vendor assurance arti", "target": "clause:openai_privacy:OpenAI certifications \u2014 SOC 2, ISO 27001, ISO 42001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Zero Data Retention (ZDR) Addendum", "target": "clause:ccpa:1798.120", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Zero Data Retention (ZDR) Addendum", "target": "clause:dpdp:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Zero Data Retention (ZDR) Addendum", "target": "clause:gdpr:7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Zero Data Retention (ZDR) Addendum", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 automated deprovisioning workflo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Zero Data Retention (ZDR) Addendum", "target": "clause:openai_privacy:OpenAI privacy request processing \u2014 data deletion", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic Zero Data Retention (ZDR) Addendum", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic zero data retention option", "target": "clause:ccpa:1798.120", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic zero data retention option", "target": "clause:gdpr:21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic zero data retention option", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 account suspension states", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic zero data retention option", "target": "clause:openai_privacy:OpenAI enterprise data controls \u2014 business data not used for", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic zero data retention option", "target": "clause:uk_duaa:automated decision rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic zero data retention option \u2014 non-retention by arch", "target": "clause:ccpa:1798.105", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic zero data retention option \u2014 non-retention by arch", "target": "clause:gdpr:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic zero data retention option \u2014 non-retention by arch", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 de-identification A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic zero data retention option \u2014 non-retention by arch", "target": "clause:iso_27701:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic zero data retention option \u2014 non-retention by arch", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 account deactivation and deletio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Anthropic zero data retention option \u2014 non-retention by arch", "target": "clause:openai_privacy:OpenAI data deletion controls", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:dama_dmbok:Ch. 12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:dama_dmbok:Ch. 14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:databricks_unity:Unity Catalog lineage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:dcam:Capability 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:eu_ai_act:23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:iso_27701:7.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:iso_27701:7.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:iso_27701:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:iso_8000:8000-8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:microsoft_purview:Microsoft Purview \u2014 Sensitive Information Types and DLP", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:nist_pf:CT.DP-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:nist_pf:CT.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:nist_pf:CT.PO-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:owasp_ai_exchange:segregatedata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Privacy Policy", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Usage Policy", "target": "clause:cobit_2019:DSS06.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Usage Policy", "target": "clause:dama_dmbok:Ch. 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Usage Policy", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Usage Policy", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Usage Policy", "target": "clause:nist_pf:PR.DS-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Usage Policy", "target": "clause:owasp_ai_exchange:runtimemodeliointegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_privacy:Usage Policy", "target": "clause:snowflake_horizon:Data Quality \u2014 Quality Metric Functions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL Deployment and Security Standards", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Documented acceptable use", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL Deployment and Security Standards", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL Deployment and Security Standards", "target": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL Deployment and Security Standards", "target": "clause:nist_zt:\u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL Deployment and Security Standards", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 safeguards for High-capability d", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL-3 Security Standard", "target": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (JIT/JEA, dynamic elevation); P", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL-3 Security Standard", "target": "clause:aws_iam:AWS IAM \u2014 Privileged Role MFA Condition", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL-3 Security Standard", "target": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL-3 Security Standard", "target": "clause:nist_zt:\u00a75.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL-3 Security Standard", "target": "clause:okta_iam:Okta Privileged Access \u2014 Zero Standing Privilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL-3 Security Standard", "target": "clause:openid:RFC 9449", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 Risk Reports", "target": "clause:anthropic_zt_agents:Part I \u2014 Regulated industries and compliance requirements; P", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 Risk Reports", "target": "clause:eidas2:Regulation (EU) 2024/1183", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 Risk Reports", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 Risk Reports", "target": "clause:nist_800_63:SP 800-63-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 Risk Reports", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 'Building trust' public disclosu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Transparency Hub \u2014 Model Reports", "target": "clause:nist_800_63:SP 800-63-4 \u00a73.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Transparency Hub \u2014 Model Reports", "target": "clause:okta_iam:Okta Identity Governance \u2014 Attestation Evidence", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Transparency Hub \u2014 Model Reports", "target": "clause:openai_sf:OpenAI Enterprise Compliance API \u2014 audit and auth log export", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Transparency Hub \u2014 Model Reports", "target": "clause:openid:RFC 9396", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Transparency Hub \u2014 Model Reports", "target": "clause:w3c_did:\u00a75.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Human Overs", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Human Overs", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Human Overs", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Human Overs", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Human Overs", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Operator Sc", "target": "clause:aws_organizations:AWS SCP \u2014 AI Agent External Communication Service Restrictio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Operator Sc", "target": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Operator Sc", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Operator Sc", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Operator Sc", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Operator Sc", "target": "clause:openai_preparedness:OpenAI Usage Policies \u2014 Permitted Use and Representation Gov", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "target": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "target": "clause:ieee_7000:\u00a77", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "target": "clause:ieee_7000:\u00a79", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "target": "clause:iso_42001:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:aws_artifact:AWS security posture documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:aws_artifact:Third-party audit report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:cobit_2019:APO12.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:coso_erm:Component 4 \u2014 Review and Revision", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:coso_erm:Principle 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:coso_erm:Principle 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:eu_ai_act:16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:eu_ai_act:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:gdpr:33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:gdpr:34", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:gdpr:39", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:iso_37301:7.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:nist_csf:RS.AN", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:nist_csf:RS.CO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:openai_policies:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 deployment restrictions and de-d", "target": "clause:aws_reliability:REL 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 deployment restrictions and de-d", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 deployment restrictions and de-d", "target": "clause:google_sre:Production Readiness Review \u2014 Rollback readiness criteria", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 deployment restrictions and de-d", "target": "clause:microsoft_azure_resil:Failover configuration \u2014 Blue/green deployment and deploymen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 deployment restrictions and de-d", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 deployment restrictions and de-d", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 deployment restrictions and de-d", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard decisions affecting deployed mod", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse detection and rapid respo", "target": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (alert when thresholds exceeded", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse detection and rapid respo", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse detection and rapid respo", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse detection and rapid respo", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse detection and rapid respo", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse detection and rapid respo", "target": "clause:mitre_atlas:AML.T0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse detection and rapid respo", "target": "clause:nist_ai_600_1:MS-2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse detection and rapid respo", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse detection and rapid respo", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "target": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "target": "clause:aws_bedrock_guardrails:Sensitive information filters", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "target": "clause:microsoft_rai:PS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "target": "clause:salesforce_trust:Data masking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:mitre_atlas:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 provider-initiated de-deployment", "target": "clause:aws_reliability:REL 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 provider-initiated de-deployment", "target": "clause:dora:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 provider-initiated de-deployment", "target": "clause:google_sre:Ch. 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 provider-initiated de-deployment", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Deployment rollback and blue-green re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 provider-initiated de-deployment", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 provider-initiated de-deployment", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 provider-initiated de-deployment", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 rapid response to misuse", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (incident response procedu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 rapid response to misuse", "target": "clause:cisa_ai_guidance:Line of Effort 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 rapid response to misuse", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 rapid response to misuse", "target": "clause:google_saif:Incident Response Management (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 rapid response to misuse", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 rapid response to misuse", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 rapid response to misuse", "target": "clause:mitre_atlas:ATLAS tactics and techniques (framework-wide)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 rapid response to misuse", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Security Standard", "target": "clause:aws_artifact:Third-party audit report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Security Standard", "target": "clause:cobit_2019:APO10.03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Security Standard", "target": "clause:eu_ai_act:23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Security Standard", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Security Standard", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Security Standard", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Security Standard", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Security Standard", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Security Standard", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:ASL-3 Security Standard", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:aws_artifact:Compliance report access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:cobit_2019:APO02.06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:cobit_2019:APO11.03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:cobit_2019:DSS01.03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:cobit_2019:MEA01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:cobit_2019:MEA03.03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:cobit_2019:MEA03.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:coso_erm:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:coso_erm:Principle 15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:coso_erm:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:iso_37301:9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:microsoft_compliance:Improvement actions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:microsoft_compliance:Improvement Actions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:nist_800_53:CA-2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:nist_csf:DE.CM-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:nist_csf:ID.RA-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:openai_policies:Data residency commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:soc2:CC1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:soc2:CC4.1 and CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment methodology", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment methodology", "target": "clause:bcbs_239:Principle 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment methodology", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment methodology", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment methodology", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment methodology", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessment methodology", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessments", "target": "clause:coso_icfr:Component 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessments", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessments", "target": "clause:google_financial:Model Cards", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessments", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessments", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessments", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability assessments", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:aws_artifact:Compliance report access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:aws_artifact:Compliance Reports", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:aws_artifact:Third-party audit report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:cobit_2019:APO11.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:cobit_2019:BAI03.07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:cobit_2019:MEA01.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:cobit_2019:MEA03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:cobit_2019:MEA03.03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:cobit_2019:MEA03.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:coso_erm:Component 5 \u2014 Reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:coso_erm:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:coso_erm:Principle 20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:eu_ai_act:Annex IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:iso_27001:A.5.33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:iso_27001:A.5.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:iso_37301:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:iso_37301:7.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:iso_37301:9.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:iso_37301:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Report", "target": "clause:soc2:CC5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:aws_artifact:AWS security posture documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:aws_artifact:Compliance report access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:bcbs_239:Principle 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:cobit_2019:APO12.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:cobit_2019:BAI02.01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:cobit_2019:BAI03.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:cobit_2019:MEA03.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:coso_erm:Component 2 \u2014 Risk Appetite", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:coso_erm:Component 2: Objective Setting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:coso_erm:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:coso_erm:Principle 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:coso_icfr:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:csa_ai_caiq:GRC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:dora:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:eu_ai_act:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:eu_ai_act:Annex III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:gdpr:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:iso_37301:4.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:iso_37301:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:iso_42001:4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:okta_governance:Access Certifications", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:soc2:CC2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:soc2:CC3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds \u2014 ASL-3 standards at defined capabilit", "target": "clause:aws_reliability:Failure management \u2014 RTO/RPO alignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds \u2014 ASL-3 standards at defined capabilit", "target": "clause:cobit_dss04:DSS04.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds \u2014 ASL-3 standards at defined capabilit", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds \u2014 ASL-3 standards at defined capabilit", "target": "clause:google_sre:Ch. 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds \u2014 ASL-3 standards at defined capabilit", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds \u2014 ASL-3 standards at defined capabilit", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 BCDR design guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds \u2014 ASL-3 standards at defined capabilit", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds \u2014 ASL-3 standards at defined capabilit", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 capability and behavior assessment", "target": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Behavior (goal/behavioral drift); Part III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 capability and behavior assessment", "target": "clause:aws_bedrock_guardrails:Contextual grounding checks", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 capability and behavior assessment", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 capability and behavior assessment", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 capability and behavior assessment", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 capability and behavior assessment", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 capability and behavior assessment", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Sandbagging and Long-range Auto", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 capability and behavior assessment", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 threshold-triggered safeguard requir", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 threshold-triggered safeguard requir", "target": "clause:eu_charter:21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 threshold-triggered safeguard requir", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 threshold-triggered safeguard requir", "target": "clause:ibm_ai_fairness:Demographic parity difference and equalized odds difference", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 threshold-triggered safeguard requir", "target": "clause:ieee_7000:Clause 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 threshold-triggered safeguard requir", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibited", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 threshold-triggered safeguard requir", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 threshold-triggered safeguard requir", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds \u2014 threshold-triggered safeguard requir", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "target": "clause:cisa_ai_guidance:Line of Effort 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "target": "clause:eu_ai_act:Annex III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "target": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "target": "clause:iso_31000:6.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "target": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "target": "clause:owasp_aivss:AIVSS-AARS", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (threshold-triggered evaluation and re", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (threshold-triggered evaluation and re", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (threshold-triggered evaluation and re", "target": "clause:ieee_7000:Clause 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (threshold-triggered evaluation and re", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (threshold-triggered evaluation and re", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (threshold-triggered evaluation and re", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (threshold-triggered evaluation and re", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (threshold-triggered evaluation and re", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds (threshold-triggered evaluation and re", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:aws_reliability:REL 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:aws_reliability:REL 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based origin routing", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:cobit_dss04:DSS04.01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:dora:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:google_sre:Cascading failure prevention", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:google_sre:Production readiness review \u2014 Availability requirements", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:iso_22301:8.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:iso_27031:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Business continuity planning methodol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Geo-redundancy and failover configura", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven availability changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:aws_bedrock_guardrails:Contextual grounding checks", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:eu_ai_act:14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:eu_ai_act:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:google_saif:Agent User Control (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:iso_31000:6.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:iso_42001:5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:iso_42001:6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:nist_rmf:GOVERN 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:oecd_ai_principles:Principle 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:okta_financial:Okta Adaptive MFA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "target": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards \u2014 pre-deployme", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (approval processes for ne", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards \u2014 pre-deployme", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards \u2014 pre-deployme", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards \u2014 pre-deployme", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards \u2014 pre-deployme", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards \u2014 pre-deployme", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) and Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:ieee_7000:\u00a76.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:iso_23894:4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:ieee_7000:\u00a711", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:ieee_7000:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:iso_42001:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:mitre:AML.M0021", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:mitre:AML.M0022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:nist_rmf:MAP 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Claude's Constitution \u2014 operator and user permission hierarc", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part II \u2014 Unscoped pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Claude's Constitution \u2014 operator and user permission hierarc", "target": "clause:nist_800_63:SP 800-63A-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Claude's Constitution \u2014 operator and user permission hierarc", "target": "clause:okta_iam:Okta OAuth \u2014 User Consent Framework", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Claude's Constitution \u2014 operator and user permission hierarc", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Claude's Constitution + Anthropic Usage Policy \u2014 Acting With", "target": "clause:google_org_policy:Google Gemini Enterprise Agent Platform \u2014 Agent Access Contr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Claude's Constitution + Anthropic Usage Policy \u2014 Acting With", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Claude's Constitution + Anthropic Usage Policy \u2014 Acting With", "target": "clause:nist_800_53:SI-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Claude's Constitution + Anthropic Usage Policy \u2014 Acting With", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Claude's Constitution + Anthropic Usage Policy \u2014 Acting With", "target": "clause:okta_authz:Okta for AI Agents \u2014 Scoped Token Authorization", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Claude's Constitution + Anthropic Usage Policy \u2014 Acting With", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Research Categories (Long-Range", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer accountability", "target": "clause:cobit_dss04:DSS04.01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer accountability", "target": "clause:dora:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer accountability", "target": "clause:iso_22301:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer accountability", "target": "clause:microsoft_azure_resil:Business continuity planning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer accountability", "target": "clause:nist_csf:GV.RR-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer accountability", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer accountability", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 leadership risk ownership", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer and internal accoun", "target": "clause:cobit_dss04:DSS04.01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer and internal accoun", "target": "clause:dora:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer and internal accoun", "target": "clause:google_sre:Production readiness review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer and internal accoun", "target": "clause:iso_22301:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer and internal accoun", "target": "clause:microsoft_azure_resil:Business continuity planning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer and internal accoun", "target": "clause:nist_csf:GV.RR", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer and internal accoun", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer and internal accoun", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74)", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74)", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74)", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74)", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74)", "target": "clause:iso_42001:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74)", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74)", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74)", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74)", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74)", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74)", "target": "clause:openai_preparedness:Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74)", "target": "clause:openai_preparedness:Internal governance (\u00a75.1) \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74) \u2014 policy maintenance and updates", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Update policies based on", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74) \u2014 policy maintenance and updates", "target": "clause:cisa_ai_guidance:Line of Effort 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74) \u2014 policy maintenance and updates", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74) \u2014 policy maintenance and updates", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74) \u2014 policy maintenance and updates", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74) \u2014 policy maintenance and updates", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74) \u2014 policy maintenance and updates", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance (\u00a74) \u2014 policy maintenance and updates", "target": "clause:openai_preparedness:Building trust (\u00a75) \u2014 framework iteration and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 public safety framework disclo", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 public safety framework disclo", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 public safety framework disclo", "target": "clause:ibm_ai_fairness:Fairness metrics (vendor due-diligence benchmark)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 public safety framework disclo", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 public safety framework disclo", "target": "clause:meta_llama_rai:Responsible Use Guide (provider guidance); Llama Acceptable", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 public safety framework disclo", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 public safety framework disclo", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 public safety framework disclo", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 public safety framework disclo", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer", "target": "clause:ieee_7000:\u00a77.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer an", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer an", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer an", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer an", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer an", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer an", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer an", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer an", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "target": "clause:eu_ai_act:Annex IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "target": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:aws_artifact:Artifact agreement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:aws_artifact:Compliance report access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:aws_artifact:Third-party audit report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:cobit_2019:APO09.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:cobit_2019:MEA03.01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:cobit_2019:MEA03.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:coso_erm:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:eu_ai_act:74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:gdpr:24", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:gdpr:31", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:iso_37301:6.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:nist_csf:GV.PO-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:aws_bedrock_guardrails:Denied topics and content filters", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:eu_ai_act:14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:google_saif:Agent User Control (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:cobit_2019:APO01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:cobit_2019:MEA02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:coso_erm:Component 1 \u2014 Board Oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:coso_erm:Component 1 \u2014 Governance and Culture", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:gdpr:24", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:iso_37301:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Responsible Scaling Officer", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73.1 Scope and Timing) \u2014 recurring evidence ca", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73.1 Scope and Timing) \u2014 recurring evidence ca", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73.1 Scope and Timing) \u2014 recurring evidence ca", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73.1 Scope and Timing) \u2014 recurring evidence ca", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73.1 Scope and Timing) \u2014 recurring evidence ca", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73.1 Scope and Timing) \u2014 recurring evidence ca", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73.1 Scope and Timing) \u2014 recurring evidence ca", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73.1 Scope and Timing) \u2014 recurring evidence ca", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73.1 Scope and Timing) \u2014 recurring evidence ca", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 per-request policy evaluation results", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:nist_rmf:GOVERN 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74) and Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73)", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73) \u2014 documented capability and safeguard evid", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73) \u2014 documented capability and safeguard evid", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73) \u2014 documented capability and safeguard evid", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73) \u2014 documented capability and safeguard evid", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73) \u2014 documented capability and safeguard evid", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73) \u2014 documented capability and safeguard evid", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73) \u2014 documented capability and safeguard evid", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (\u00a73) \u2014 documented capability and safeguard evid", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "target": "clause:eu_ai_act:27", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "target": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "target": "clause:ieee_7000:\u00a710", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (evaluation-gated deployment)", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (evaluation-gated deployment)", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (evaluation-gated deployment)", "target": "clause:ibm_ai_fairness:Fairness metrics (quantitative outcome indicators)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (evaluation-gated deployment)", "target": "clause:ieee_7000:\u00a79.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (evaluation-gated deployment)", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (evaluation-gated deployment)", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (evaluation-gated deployment)", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (evaluation-gated deployment)", "target": "clause:nist_rmf:MEASURE 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (evaluation-gated deployment)", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports (evaluation-gated deployment)", "target": "clause:openai_model_spec:Stay in bounds; Seek the truth together; Do the best work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and capability determinations \u2014 documented safe", "target": "clause:aws_reliability:REL 12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and capability determinations \u2014 documented safe", "target": "clause:dora:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and capability determinations \u2014 documented safe", "target": "clause:google_sre:Production readiness review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and capability determinations \u2014 documented safe", "target": "clause:iso_22301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and capability determinations \u2014 documented safe", "target": "clause:iso_27031:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and capability determinations \u2014 documented safe", "target": "clause:nist_800_160_v2:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and capability determinations \u2014 documented safe", "target": "clause:nist_csf:GV.OV-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and capability determinations \u2014 documented safe", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and capability determinations \u2014 documented safe", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a75.1 Internal governanc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and ongoing capability reassessment", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and ongoing capability reassessment", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and ongoing capability reassessment", "target": "clause:ibm_ai_fairness:Fairness metric computation (batch, schedulable on productio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and ongoing capability reassessment", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and ongoing capability reassessment", "target": "clause:meta_llama_rai:System-level alignment \u2014 input/output mitigations; Llama Acc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and ongoing capability reassessment", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and ongoing capability reassessment", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and ongoing capability reassessment", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and ongoing capability reassessment", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Risk Reports and ongoing capability reassessment", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 ASL-3 Deployment Standard (Misuse Safeguards and", "target": "clause:aws_organizations:Amazon Bedrock Policies \u2014 Organization-Level Guardrail Enfor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 ASL-3 Deployment Standard (Misuse Safeguards and", "target": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 ASL-3 Deployment Standard (Misuse Safeguards and", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 ASL-3 Deployment Standard (Misuse Safeguards and", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Resource Constraint Enfor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 ASL-3 Deployment Standard (Misuse Safeguards and", "target": "clause:iso_42001:6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 ASL-3 Deployment Standard (Misuse Safeguards and", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 ASL-3 Deployment Standard (Misuse Safeguards and", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Model Deployment Restriction and Content S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 ASL-3 Deployment Standard (Misuse Safeguards and", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Assessment (Periodic Re-Evaluation)", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Assessment (Periodic Re-Evaluation)", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Managed Constraint Compli", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Assessment (Periodic Re-Evaluation)", "target": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Assessment (Periodic Re-Evaluation)", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Assessment (Periodic Re-Evaluation)", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Assessment (Periodic Re-Evaluation)", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Assessment (Periodic Re-Evaluation)", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Ongoing Evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Thresholds and Required Safeguards", "target": "clause:aws_organizations:AWS Organizations SCP Design \u2014 Scope Boundary Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Thresholds and Required Safeguards", "target": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Thresholds and Required Safeguards", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Thresholds and Required Safeguards", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Thresholds and Required Safeguards", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Thresholds and Required Safeguards", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Thresholds and Required Safeguards", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Tracked Categories and Deploymen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Documented Capability and Safeguards Assessments", "target": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Evidence Archive", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Documented Capability and Safeguards Assessments", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Documented Capability and Safeguards Assessments", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Documented Capability and Safeguards Assessments", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Documented Capability and Safeguards Assessments", "target": "clause:nist_800_53:AU-11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Documented Capability and Safeguards Assessments", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Documented Evalu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance (Responsible Scaling Officer and Board", "target": "clause:aws_organizations:AWS Audit Manager Custom Frameworks \u2014 Board-Ready Governance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance (Responsible Scaling Officer and Board", "target": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance (Responsible Scaling Officer and Board", "target": "clause:microsoft_rai:Microsoft RAI Transparency Report \u2014 Board Governance Disclos", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance (Responsible Scaling Officer and Board", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance (Responsible Scaling Officer and Board", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance (Responsible Scaling Officer and Board", "target": "clause:soc2:CC2.3 \u2014 Communicates with external parties", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance and Transparency (Public Disclosures)", "target": "clause:aws_organizations:AWS Artifact \u2014 On-Demand Regulatory Compliance Disclosure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance and Transparency (Public Disclosures)", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance and Transparency (Public Disclosures)", "target": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report + Purview \u2014 Dis", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance and Transparency (Public Disclosures)", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance and Transparency (Public Disclosures)", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Disclosure and G", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance and Transparency (Public Disclosures)", "target": "clause:soc2:CC2.3 / CC7.4 \u2014 External communication and incident response", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Re-Assessment Triggers on Material Change", "target": "clause:aws_organizations:AWS Control Tower Proactive Controls \u2014 Change Governance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Re-Assessment Triggers on Material Change", "target": "clause:coso_erm:Principle 17 \u2014 Pursues Improvement in Enterprise Risk Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Re-Assessment Triggers on Material Change", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Re-Assessment Triggers on Material Change", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Policy Simulation for Con", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Re-Assessment Triggers on Material Change", "target": "clause:iso_42001:6.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Re-Assessment Triggers on Material Change", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Re-Assessment Triggers on Material Change", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Required Safeguards as Blocking Conditions", "target": "clause:coso_erm:Principle 10 \u2014 Identifies Risk", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Required Safeguards as Blocking Conditions", "target": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies \u2014 Constraint", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Required Safeguards as Blocking Conditions", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Required Safeguards as Blocking Conditions", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Required Safeguards as Blocking Conditions", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report", "target": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Attestation Artifact Ge", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report", "target": "clause:okta_authz:Okta Authorization Server \u2014 Signed Token Claims as Authoriza", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 System Cards and Safeguards Repo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report", "target": "clause:soc2:CC3.1 \u2014 COSO Principle 6 \u2014 Specifies suitable objectives", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report Sign-Off", "target": "clause:aws_organizations:AWS Audit Manager \u2014 Deployment Scope Evidence Collection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report Sign-Off", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report Sign-Off", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report Sign-Off", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report Sign-Off", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report Sign-Off", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Usage Policy (separate document) \u2014 restricted high-risk uses", "target": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Usage Policy (separate document) \u2014 restricted high-risk uses", "target": "clause:eu_ai_act:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Usage Policy (separate document) \u2014 restricted high-risk uses", "target": "clause:eu_ai_act:Annex III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Usage Policy (separate document) \u2014 restricted high-risk uses", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Usage Policy (separate document) \u2014 restricted high-risk uses", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Usage Policy (separate document) \u2014 restricted high-risk uses", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Usage Policy (separate document) \u2014 restricted high-risk uses", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_rsp:Usage Policy (separate document) \u2014 restricted high-risk uses", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 factual-accuracy evaluations and limitations", "target": "clause:aws_bedrock_kb:Guardrails \u2014 contextual grounding check", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 factual-accuracy evaluations and limitations", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 factual-accuracy evaluations and limitations", "target": "clause:google_vertex_rag:Grounded generation \u2014 grounding supports and citations", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 factual-accuracy evaluations and limitations", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 hallucination and factuality evaluations", "target": "clause:aws_bedrock_kb:Guardrails \u2014 contextual grounding check", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 hallucination and factuality evaluations", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 hallucination and factuality evaluations", "target": "clause:google_vertex_rag:Check Grounding API", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 hallucination and factuality evaluations", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 knowledge cutoff disclosure", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 knowledge cutoff disclosure", "target": "clause:google_vertex_rag:Grounding citations and source attribution", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 knowledge cutoff disclosure", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 knowledge cutoff disclosure", "target": "clause:w3c_prov:\u00a75.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 known limitations and citation-accuracy risks", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 known limitations and citation-accuracy risks", "target": "clause:iso_30401:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 known limitations and citation-accuracy risks", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 known limitations and citation-accuracy risks", "target": "clause:w3c_prov:\u00a75.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 known limitations disclosure", "target": "clause:dama_dmbok:Ch. 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 known limitations disclosure", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 known limitations disclosure", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 known limitations disclosure", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model Card \u2014 Training Data Cutoff", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model Card \u2014 Training Data Cutoff", "target": "clause:iso_42001:A.6.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model Card \u2014 Training Data Cutoff", "target": "clause:openai_transparency:System Card \u2014 Knowledge Limitations", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 training data description", "target": "clause:dama_dmbok:Ch. 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 training data description", "target": "clause:eu_ai_act:53", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 training data description", "target": "clause:google_vertex_rag:Grounding \u2014 Data Source Configuration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_transparency:Model card \u2014 training data description", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:csa_aicm:AIS-11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:csa_aismm:APP-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:csa_aismm:APP-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:owasp_aisvs:C9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Regulated industries and compliance requirements; P", "target": "clause:eidas2:Regulation (EU) 2024/1183", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Regulated industries and compliance requirements; P", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Regulated industries and compliance requirements; P", "target": "clause:nist_800_63:SP 800-63-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part I \u2014 Regulated industries and compliance requirements; P", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 'Building trust' public disclosu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Identity and privilege abuse (agents operate with", "target": "clause:aws_iam:AWS IAM Best Practices \u2014 Separate Human Workload Identity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Identity and privilege abuse (agents operate with", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Identity and privilege abuse (agents operate with", "target": "clause:google_saif:Google Cloud IAM \u2014 Dedicated Service Accounts", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Identity and privilege abuse (agents operate with", "target": "clause:iso_24760:7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Identity and privilege abuse (agents operate with", "target": "clause:nist_800_63:SP 800-63-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Identity and privilege abuse (agents operate with", "target": "clause:okta_iam:Okta Universal Directory \u2014 Human NHI Separation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Memory-based privilege retention (escalating privi", "target": "clause:aws_iam:AWS GuardDuty \u2014 Privilege Escalation Findings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Memory-based privilege retention (escalating privi", "target": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Memory-based privilege retention (escalating privi", "target": "clause:google_saif:Google Security Command Center \u2014 privilege escalation detect", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Memory-based privilege retention (escalating privi", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Memory-based privilege retention (escalating privi", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Memory-based privilege retention (escalating privi", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks (loop amplification)", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks (loop amplification)", "target": "clause:iso_31000:6.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks (loop amplification)", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks (loop amplification)", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks (loop amplification)", "target": "clause:nist_rmf:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks (loop amplification)", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks (loop amplification)", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:csa_aicm:GRC (operational / cost risk)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:csa_aismm:APP-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:iso_31000:6.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:iso_42001:A.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:mitre_atlas:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:mitre_atlas:AML.T0034.002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:mitre:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:nist_rmf:MANAGE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:owasp_aisvs:C12.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "target": "clause:owasp_llm10:LLM10:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:csa_aicm:AIS-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:csa_aicm:STA-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:csa_aismm:APP-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:csa_aismm:APP-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning; Part III \u2014 Input sanitization (tre", "target": "clause:aws_bedrock_guardrails:Contextual grounding checks", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning; Part III \u2014 Input sanitization (tre", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning; Part III \u2014 Input sanitization (tre", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning; Part III \u2014 Input sanitization (tre", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning; Part III \u2014 Input sanitization (tre", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning; Part III \u2014 Input sanitization (tre", "target": "clause:nist_ai_600_1:2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning; Part III \u2014 Input sanitization (tre", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning; Part III \u2014 Input sanitization (tre", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning; Part III \u2014 Input sanitization (tre", "target": "clause:salesforce_trust:Secure data retrieval, dynamic grounding, and toxicity detec", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance (manager to worker", "target": "clause:aws_iam:AWS STS \u2014 Role Chaining Session Policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance (manager to worker", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance (manager to worker", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance (manager to worker", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance (manager to worker", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Delegation Depth Limit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Chaining", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:nist_rmf:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:oauth_bcp:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:oauth_bcp:\u00a72.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core delegation chain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:csa_aicm:IAM-08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:csa_aicm:IAM-15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:csa_aismm:IAM-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:csa_aismm:IAM-05.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:mitre_atlas:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:mitre_atlas:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:owasp_aisvs:C5.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:owasp_aisvs:C9.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity Validation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:csa_aicm:LOG-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:csa_aicm:LOG-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:csa_aismm:IR-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:csa_aismm:MON-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:eu_ai_act:19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:iso_42001:A.6.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:nist_rmf:GOVERN 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:nist_zt:Tenet 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Log all tool invocations)", "target": "clause:aws_bedrock_guardrails:Guardrail trace in agent invocation output", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Log all tool invocations)", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Log all tool invocations)", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Log all tool invocations)", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Log all tool invocations)", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Log all tool invocations)", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Log all tool invocations)", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Log all tool invocations)", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Log all tool invocations)", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Log all tool invocations)", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "target": "clause:csa_aicm:LOG-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "target": "clause:csa_aicm:LOG-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "target": "clause:csa_aismm:INF-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "target": "clause:csa_aismm:MON-02.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "target": "clause:csa_aismm:MON-03.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "target": "clause:owasp_aisvs:C12.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "target": "clause:owasp_aisvs:C12.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Advanced: hard", "target": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 HSM Integration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Advanced: hard", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Advanced: hard", "target": "clause:google_saif:Google Cloud IAM \u2014 HSM Service Account Keys", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Advanced: hard", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73.1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (certificate li", "target": "clause:aws_iam:AWS IAM \u2014 Role Deletion Revocation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (certificate li", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (certificate li", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (certificate li", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 Deprovisioning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (certificate li", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent Gateway revocation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (certificate li", "target": "clause:scim:RFC7644 \u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Enterprise: mu", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Enterprise: mu", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Enterprise: mu", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Enterprise: mu", "target": "clause:mitre_atlas:AML.T0040", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Enterprise: mu", "target": "clause:nist_rmf:MEASURE 2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Foundation/Ent", "target": "clause:aws_iam:AWS Well-Architected Security Pillar \u2014 SEC02 (identity and a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Foundation/Ent", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Foundation/Ent", "target": "clause:google_saif:Google SAIF \u2014 Expand strong security foundations (least-priv", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Foundation/Ent", "target": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Foundation/Ent", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Foundation/Ent", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Foundation/Ent", "target": "clause:okta_iam:Okta for AI Agents \u2014 Assurance Levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Unique cryptog", "target": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 Certificate Binding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Unique cryptog", "target": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Keyless Authenti", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Unique cryptog", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Unique cryptog", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Unique cryptog", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Unique cryptog", "target": "clause:ping_identity:PingOne Credentials \u2014 Verifiable Credentials", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification (persistent agent IDs", "target": "clause:aws_iam:AWS IAM Best Practices \u2014 Use Roles Not Users", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification (persistent agent IDs", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification (persistent agent IDs", "target": "clause:nist_800_63:SP 800-63-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification (persistent agent IDs", "target": "clause:okta_iam:Okta for AI Agents \u2014 Agent Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification (persistent agent IDs", "target": "clause:owasp_nhi10:NHI1:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification (persistent agent IDs", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification (persistent agent IDs", "target": "clause:scim:RFC 7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:csa_aicm:IAM-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:csa_aicm:IAM-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:csa_aismm:IAM-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:csa_aismm:IAM-03.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:csa_aismm:IAM-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:mitre_atlas:AML.T0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Unused Access Findings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:csa_aicm:CCC-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:csa_aicm:IAM-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:csa_aismm:IAM-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:csa_aismm:ORG-02.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:csa_aismm:ORG-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:iso_24760:7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:iso_42001:A.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:nist_rmf:AI RMF: Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:okta_iam:Okta ISPM \u2014 Unmanaged Agent Discovery", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:owasp_aisvs:C3.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "target": "clause:scim:RFC 7644 \u00a73.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (approval processes for ne", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (approval processes for ne", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (approval processes for ne", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (approval processes for ne", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (approval processes for ne", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) and Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:csa_aicm:CCC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:csa_aicm:GRC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:csa_aismm:APP-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:csa_aismm:IAM-05.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:csa_aismm:ORG-05.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:aws_iam:AWS IAM Tagging \u2014 Resource Owner Tags", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:csa_aicm:GRC-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:csa_aicm:IAM-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:csa_aismm:GOV-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:csa_aismm:IAM-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:iso_42001:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:iso_42001:A.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:nist_800_63:SP 800-63-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:okta_iam:Okta for AI Agents \u2014 Owner Binding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:openai_preparedness:Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "target": "clause:scim:RFC 7643 \u00a74.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Documented acceptable use", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Documented acceptable use", "target": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Documented acceptable use", "target": "clause:nist_zt:\u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Documented acceptable use", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 safeguards for High-capability d", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:cisa_zt:Governance (cross-cutting capability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:csa_aicm:GRC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:csa_aicm:GRC-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:csa_aismm:GOV-03.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:csa_aismm:GOV-05.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:csa_aismm:RSK-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:nist_800_63:SP 800-63-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:okta_iam:Okta Identity Governance \u2014 Governance Structure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:openai_preparedness:Internal governance (\u00a75.1) \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "target": "clause:ping_identity:Ping Identity for AI \u2014 Governance Capabilities", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (incident response procedu", "target": "clause:cisa_ai_guidance:Line of Effort 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (incident response procedu", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (incident response procedu", "target": "clause:google_saif:Incident Response Management (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (incident response procedu", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (incident response procedu", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (incident response procedu", "target": "clause:mitre_atlas:ATLAS tactics and techniques (framework-wide)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (incident response procedu", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "target": "clause:cisa_ai_guidance:Line of Effort 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "target": "clause:eu_ai_act:Annex III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "target": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "target": "clause:iso_31000:6.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "target": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "target": "clause:owasp_aivss:AIVSS-AARS", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Update policies based on", "target": "clause:cisa_ai_guidance:Line of Effort 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Update policies based on", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Update policies based on", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Update policies based on", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Update policies based on", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Update policies based on", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Update policies based on", "target": "clause:openai_preparedness:Building trust (\u00a75) \u2014 framework iteration and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:aws_bedrock_guardrails:Content filters \u2014 real-time policy screening", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:aws_iam:AWS GuardDuty \u2014 IAM Finding Types", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:google_saif:Google Security Command Center \u2014 Threat Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:nist_zt:Tenet 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Anomalous Auth Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "target": "clause:salesforce_trust:Toxicity detection \u2014 output scoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (alert when thresholds exceeded", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (alert when thresholds exceeded", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (alert when thresholds exceeded", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (alert when thresholds exceeded", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (alert when thresholds exceeded", "target": "clause:mitre_atlas:AML.T0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (alert when thresholds exceeded", "target": "clause:nist_ai_600_1:MS-2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (alert when thresholds exceeded", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (alert when thresholds exceeded", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (API call rates, data access vo", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (API call rates, data access vo", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (API call rates, data access vo", "target": "clause:iso_31000:6.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (API call rates, data access vo", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (API call rates, data access vo", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (API call rates, data access vo", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "target": "clause:csa_aicm:SEF-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "target": "clause:csa_aicm:SEF-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "target": "clause:csa_aismm:IR-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "target": "clause:csa_aismm:IR-05.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "target": "clause:owasp_aisvs:C12.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "target": "clause:owasp_aisvs:C9.3.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part IV Phase 6 \u2014 Attribute-ba", "target": "clause:aws_iam:AWS GuardDuty \u2014 Instance Credential Exfiltration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part IV Phase 6 \u2014 Attribute-ba", "target": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part IV Phase 6 \u2014 Attribute-ba", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part IV Phase 6 \u2014 Attribute-ba", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part IV Phase 6 \u2014 Attribute-ba", "target": "clause:nist_zt:Tenet 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part IV Phase 6 \u2014 Attribute-ba", "target": "clause:okta_iam:Okta Adaptive MFA \u2014 Impossible Travel Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response (session termination, credenti", "target": "clause:aws_bedrock_guardrails:Content filters \u2014 per-request blocking (no agent suspension)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response (session termination, credenti", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response (session termination, credenti", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response (session termination, credenti", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response (session termination, credenti", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response (session termination, credenti", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response (session termination, credenti", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response (session termination, credenti", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response; Part V \u2014 Establish emergency", "target": "clause:aws_iam:AWS GuardDuty \u2014 Automated Incident Response", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response; Part V \u2014 Establish emergency", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response; Part V \u2014 Establish emergency", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response; Part V \u2014 Establish emergency", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response; Part V \u2014 Establish emergency", "target": "clause:nist_zt:Tenet 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Automated response; Part V \u2014 Establish emergency", "target": "clause:okta_iam:Okta Workflows \u2014 Identity Incident Response", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "target": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "target": "clause:mitre_atlas:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:csa_aicm:LOG-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:csa_aismm:MON-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:csa_aismm:MON-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:csa_aicm:AIS-11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:csa_aicm:CCC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:csa_aismm:APP-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:csa_aismm:APP-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:csa_aismm:DEV-03.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:mitre_atlas:AML.T0081", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:owasp_aisvs:C10.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:aws_bedrock_guardrails:Sensitive information filters", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:csa_aicm:AIS-10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:csa_aicm:AIS-15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:csa_aismm:APP-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:microsoft_rai:PS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:owasp_aisvs:C7.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:owasp_aisvs:C7.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "target": "clause:salesforce_trust:Data masking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:csa_aicm:DSP-17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:csa_aicm:LOG-16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:csa_aismm:DAT-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:csa_aismm:MON-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:mitre_atlas:AML.T0057", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Dynamic privilege adjustment b", "target": "clause:aws_iam:AWS STS \u2014 Session Policies Task Scoped", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Dynamic privilege adjustment b", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Dynamic privilege adjustment b", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Dynamic privilege adjustment b", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Dynamic privilege adjustment b", "target": "clause:okta_iam:Okta Cross App Access \u2014 task-scoped resource tokens (RFC 869", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Dynamic privilege adjustment b", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (JIT/JEA, dynamic elevation); P", "target": "clause:aws_iam:AWS IAM \u2014 Privileged Role MFA Condition", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (JIT/JEA, dynamic elevation); P", "target": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (JIT/JEA, dynamic elevation); P", "target": "clause:nist_zt:\u00a75.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (JIT/JEA, dynamic elevation); P", "target": "clause:okta_iam:Okta Privileged Access \u2014 Zero Standing Privilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (JIT/JEA, dynamic elevation); P", "target": "clause:openid:RFC 9449", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Review and certify permissions", "target": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Continuous Access Review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Review and certify permissions", "target": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Review and certify permissions", "target": "clause:okta_iam:Okta Access Certifications \u2014 Service Account Reviews", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Review and certify permissions", "target": "clause:scim:RFC 7644 \u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Recovery capabilities", "target": "clause:csa_aismm:INF-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Recovery capabilities", "target": "clause:csa_aismm:IR-02.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Recovery capabilities", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Recovery capabilities", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Recovery capabilities", "target": "clause:owasp_aisvs:C3.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Recovery capabilities", "target": "clause:owasp_aisvs:C3.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Recovery capabilities", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Recovery capabilities", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "target": "clause:csa_aicm:I&S-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "target": "clause:csa_aicm:I&S-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "target": "clause:csa_aismm:INF-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "target": "clause:mitre_atlas:AML.T0025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (identity-based isolation: ev", "target": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (identity-based isolation: ev", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (identity-based isolation: ev", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (identity-based isolation: ev", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "target": "clause:csa_aicm:AIS-11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "target": "clause:csa_aicm:AIS-13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "target": "clause:csa_aismm:APP-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "target": "clause:iso_42001:A.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "target": "clause:mitre_atlas:AML.M0032", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "target": "clause:mitre_atlas:AML.T0105", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "target": "clause:owasp_aisvs:C4.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "target": "clause:owasp_aisvs:C4.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (OAuth 2.0); Part IV Phase", "target": "clause:fapi_2_0:\u00a75.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (OAuth 2.0); Part IV Phase", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (OAuth 2.0); Part IV Phase", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (OAuth 2.0); Part IV Phase", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (OAuth 2.0); Part IV Phase", "target": "clause:okta_iam:Okta OIDC \u2014 Dynamic Client Registration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (OAuth 2.0); Part IV Phase", "target": "clause:openid:RFC 9396", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (OAuth 2.0); Part IV Phase", "target": "clause:ping_identity:PingFederate \u2014 OIDC Audience Validation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:csa_aicm:IAM-10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:csa_aicm:IAM-14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:csa_aismm:IAM-05.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens, OAuth", "target": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens, OAuth", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens, OAuth", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens, OAuth", "target": "clause:nist_rmf:MANAGE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens); Part", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens); Part", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens); Part", "target": "clause:nist_ai_600_1:MS-2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens); Part", "target": "clause:nist_rmf:MANAGE 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens); Part", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (token-based authenticatio", "target": "clause:nist_800_63:SP 800-63C-4 \u00a73.15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (token-based authenticatio", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (token-based authenticatio", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (token-based authenticatio", "target": "clause:okta_iam:Okta OAuth \u2014 DPoP token binding (RFC 9449)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (token-based authenticatio", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (token-based authenticatio", "target": "clause:openid:RFC 9449", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication; Part III \u2014 Access control", "target": "clause:aws_iam:AWS IAM Best Practices \u2014 Least Privilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication; Part III \u2014 Access control", "target": "clause:google_saif:Google Cloud IAM Best Practices \u2014 Least Privilege Roles", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication; Part III \u2014 Access control", "target": "clause:nist_800_63:SP 800-63B-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication; Part III \u2014 Access control", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication; Part III \u2014 Access control", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication; Part III \u2014 Access control", "target": "clause:okta_iam:Okta for AI Agents \u2014 Minimum Privilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Service authentication; Part III \u2014 Access control", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Distributed tracing across multi-ag", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Distributed tracing across multi-ag", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Distributed tracing across multi-ag", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Distributed tracing across multi-ag", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Distributed tracing across multi-ag", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Distributed tracing across multi-ag", "target": "clause:nist_rmf:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Distributed tracing across multi-ag", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "target": "clause:csa_aicm:LOG-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "target": "clause:csa_aismm:IAM-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "target": "clause:csa_aismm:MON-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "target": "clause:eu_ai_act:19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "target": "clause:iso_42001:A.6.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "target": "clause:owasp_aisvs:C9.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:csa_aicm:MDS-08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:csa_aicm:MDS-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:csa_aismm:DEV-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:csa_aismm:MOD-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:owasp_aisvs:C3.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:owasp_aisvs:C6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:owasp_aisvs:C6.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:csa_aicm:AIS-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:csa_aicm:CCC-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:csa_aismm:DEV-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:csa_aismm:DEV-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:imda_mgf:2.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:csa_aicm:STA-08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:csa_aicm:STA-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:csa_aismm:DEV-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:csa_aismm:DEV-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:csa_aismm:DEV-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:mitre_atlas:AML.M0013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:mitre_atlas:AML.T0099", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments", "target": "clause:eidas2:20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments", "target": "clause:nist_800_63:SP 800-63C-4 \u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments", "target": "clause:okta_iam:Okta trust page (trust.okta.com) \u2014 third-party audit certifi", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments", "target": "clause:openid:OpenID Connect Core 1.0 \u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments", "target": "clause:ping_identity:Ping Identity compliance certifications (SOC 2 Type II, ISO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:csa_aicm:AIS-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:csa_aicm:STA-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:csa_aismm:APP-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:csa_aismm:DEV-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:csa_aismm:DEV-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:imda_mgf:2.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part IV Phase 5 \u2014 Sand", "target": "clause:aws_bedrock_guardrails:Content filters applied to agent responses", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part IV Phase 5 \u2014 Sand", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part IV Phase 5 \u2014 Sand", "target": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part IV Phase 5 \u2014 Sand", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part IV Phase 5 \u2014 Sand", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part IV Phase 5 \u2014 Sand", "target": "clause:mitre_atlas:AML.T0010", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part IV Phase 5 \u2014 Sand", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:aws_iam:AWS IAM Tagging \u2014 Principal Tags", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:iso_42001:6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:nist_800_63:SP 800-63-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:nist_zt:Tenet 1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:okta_iam:Okta for AI Agents \u2014 Capability Manifest", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part II \u2014 Unscoped pr", "target": "clause:nist_800_63:SP 800-63A-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part II \u2014 Unscoped pr", "target": "clause:okta_iam:Okta OAuth \u2014 User Consent Framework", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part II \u2014 Unscoped pr", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:aws_bedrock_guardrails:Contextual grounding checks", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:csa_aicm:IAM-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:csa_aicm:IAM-15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:csa_aismm:IAM-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:eu_ai_act:14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:google_saif:Agent User Control (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:iso_31000:6.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:owasp_aisvs:C9.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency", "target": "clause:aws_iam:AWS IAM \u2014 Permission Boundaries", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency", "target": "clause:okta_iam:Okta Authorization Server \u2014 Scope Boundary Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency", "target": "clause:ping_identity:PingFederate \u2014 Scope Reduction Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:csa_aicm:AIS-11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:csa_aicm:IAM-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:csa_aismm:APP-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:csa_aismm:APP-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:csa_aicm:AIS-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:csa_aicm:LOG-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:csa_aismm:MON-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:csa_aismm:MON-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:mitre_atlas:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "target": "clause:csa_aismm:APP-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "target": "clause:owasp_aisvs:C2.1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:csa_aicm:DSP-20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:csa_aicm:DSP-23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:csa_aismm:DAT-02.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:csa_aismm:DAT-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:csa_aismm:DAT-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:mitre_atlas:AML.T0066", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:mitre_atlas:AML.T0100", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:csa_aismm:APP-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:csa_aismm:IR-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "target": "clause:aws_bedrock_guardrails:Denied topics and content filters", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "target": "clause:eu_ai_act:14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "target": "clause:google_saif:Agent User Control (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "target": "clause:aws_bedrock_guardrails:Denied topics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "target": "clause:nist_rmf:MANAGE 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:csa_aicm:AIS-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:csa_aicm:AIS-10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:csa_aismm:APP-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:csa_aismm:APP-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:aws_bedrock_guardrails:Content filters \u2014 input screening", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:csa_aicm:AIS-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:csa_aicm:AIS-10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:csa_aismm:APP-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:owasp_ai_exchange:anomalousinputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:owasp_aisvs:C10.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:owasp_aisvs:C9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "target": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "target": "clause:csa_aismm:APP-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "target": "clause:mitre:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "target": "clause:owasp_aisvs:C11.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:csa_aicm:IAM-15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:csa_aicm:IAM-18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:csa_aismm:APP-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:csa_aismm:IAM-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:csa_aismm:IAM-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing (explicit lists of perm", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing (explicit lists of perm", "target": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing (explicit lists of perm", "target": "clause:iso_42001:7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing (explicit lists of perm", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing (explicit lists of perm", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing (explicit lists of perm", "target": "clause:mitre_atlas:AML.T0010", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing (explicit lists of perm", "target": "clause:nist_rmf:GOVERN 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing (explicit lists of perm", "target": "clause:owasp_aisvs:C9.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing (explicit lists of perm", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "target": "clause:eu_ai_act:14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (credentials never in", "target": "clause:aws_iam:AWS Well-Architected SEC02-BP03 \u2014 Secrets Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (credentials never in", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (credentials never in", "target": "clause:google_saif:Google Cloud Secret Manager \u2014 Credential Hygiene", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (credentials never in", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (credentials never in", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (credentials never in", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (each agent instance", "target": "clause:aws_iam:AWS CloudTrail \u2014 Credential Sharing Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (each agent instance", "target": "clause:iso_24760:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (each agent instance", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (each agent instance", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (each agent instance", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (each agent instance", "target": "clause:okta_iam:Okta \u2014 Concurrent Session Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:csa_aicm:DSP-10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:csa_aicm:DSP-17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:csa_aismm:APP-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:csa_aismm:DAT-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:mitre_atlas:AML.M0005", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:mitre_atlas:AML.M0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:mitre_atlas:AML.T0056", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:owasp_aisvs:C8.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (authorization c", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (authorization c", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (authorization c", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (authorization c", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (authorization c", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (authorization c", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 content evaluation for arbitrary payloa", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:aws_iam:AWS CloudTrail \u2014 Assume Role Audit Trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:csa_aicm:LOG-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:csa_aismm:MON-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:imda_mgf:1.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:imda_mgf:2.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:nist_ai_600_1:2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:nist_zt:Tenet 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:okta_iam:Okta System Log \u2014 Token Exchange Audit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:csa_aismm:IAM-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:iso_42001:A.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:mitre_atlas:AML.T0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:nist_rmf:AI RMF: Govern, Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:nist_rmf:MANAGE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy and Autonom", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:owasp_aisvs:C9.2.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:owasp_aisvs:C9.5.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Assume Conditions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:csa_aicm:AIS-11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:csa_aismm:APP-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:csa_aismm:IAM-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:owasp_aisvs:C9.5.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "target": "clause:ping_identity:Ping Identity \u2014 Cross Organization Agent Auth", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 AI g", "target": "clause:eu_ai_act:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 AI g", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 AI g", "target": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 AI g", "target": "clause:iso_31000:6.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 AI g", "target": "clause:iso_42001:4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 AI g", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 AI g", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 AI g", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Just-in-time (JIT) access; Part III \u2014 Priv", "target": "clause:aws_iam:AWS STS \u2014 Assume Role Session Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Just-in-time (JIT) access; Part III \u2014 Priv", "target": "clause:google_saif:Google Cloud WIF \u2014 STS Token Exchange", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Just-in-time (JIT) access; Part III \u2014 Priv", "target": "clause:nist_800_63:SP 800-63B-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Just-in-time (JIT) access; Part III \u2014 Priv", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Just-in-time (JIT) access; Part III \u2014 Priv", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Just-in-time (JIT) access; Part III \u2014 Priv", "target": "clause:okta_iam:Okta Cross App Access \u2014 Identity Assertion Authorization Gra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Just-in-time (JIT) access; Part III \u2014 Priv", "target": "clause:openid:RFC 9396 \u00a76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Short-lived, identity-provider-issued cred", "target": "clause:aws_iam:AWS Secrets Manager \u2014 Automated Rotation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Short-lived, identity-provider-issued cred", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Short-lived, identity-provider-issued cred", "target": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Short Lived Toke", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Short-lived, identity-provider-issued cred", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Short-lived, identity-provider-issued cred", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Short-lived, identity-provider-issued cred", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:csa_aicm:DSP-17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:csa_aicm:DSP-21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:csa_aismm:DAT-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:owasp_aisvs:C8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:owasp_aisvs:C8.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:owasp_aisvs:C8.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:owasp_aisvs:C9.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Behavior (goal/behavioral drift); Part III", "target": "clause:aws_bedrock_guardrails:Contextual grounding checks", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Behavior (goal/behavioral drift); Part III", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Behavior (goal/behavioral drift); Part III", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Behavior (goal/behavioral drift); Part III", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Behavior (goal/behavioral drift); Part III", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Behavior (goal/behavioral drift); Part III", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Sandbagging and Long-range Auto", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Behavior (goal/behavioral drift); Part III", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Measure what matters (Dwell time and cover", "target": "clause:aws_iam:AWS Security Hub \u2014 Identity Security Metrics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Measure what matters (Dwell time and cover", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Measure what matters (Dwell time and cover", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Measure what matters (Dwell time and cover", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Measure what matters (Dwell time and cover", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Measure what matters (Dwell time and cover", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Measure what matters (Dwell time and cover", "target": "clause:nist_rmf:MEASURE 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Measure what matters (Dwell time and cover", "target": "clause:okta_iam:Okta Identity Governance \u2014 Program Metrics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Establish emergency change procedures in advance; P", "target": "clause:aws_iam:AWS IAM \u2014 Break Glass Role", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Establish emergency change procedures in advance; P", "target": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Establish emergency change procedures in advance; P", "target": "clause:nist_800_63:SP 800-63B-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Establish emergency change procedures in advance; P", "target": "clause:okta_iam:Okta Privileged Access \u2014 Break Glass", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:csa_aicm:LOG-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:csa_aicm:TVM-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:csa_aismm:IR-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:csa_aismm:MON-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:anthropic_zt_agents:Part V \u2014 Trust through verification for defensive agents", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:cobit_2019:APO09.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:cobit_2019:MEA03.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:coso_erm:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:eu_ai_act:74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:gdpr:31", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:iso_37301:9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:okta_governance:Access Requests", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:soc2:CC2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Artifact agreement", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:cobit_2019:BAI02.01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:cobit_2019:BAI03.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:coso_erm:Component 2: Objective Setting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:coso_erm:Component 4 \u2014 Review and Revision", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:coso_erm:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:csa_ai_caiq:GRC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:eu_ai_act:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:gdpr:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:gdpr:33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:gdpr:34", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:iso_42001:4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:nist_csf:RS.AN", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:nist_csf:RS.CO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:AWS security posture documentation", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:cobit_2019:APO02.06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:cobit_2019:APO07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:cobit_2019:APO11.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:cobit_2019:APO12.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:cobit_2019:MEA01.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:cobit_2019:MEA02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:cobit_2019:MEA03.01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:cobit_2019:MEA03.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:cobit_2019:MEA03.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:coso_erm:Component 1 \u2014 Attract and Retain Capable Individuals", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:coso_erm:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:coso_erm:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:eu_ai_act:74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:gdpr:24", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:gdpr:31", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:google_compliance:Compliance Reports Manager", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:iso_27001:A.5.31", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:iso_37301:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:iso_37301:7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:microsoft_compliance:Compliance Manager platform", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:microsoft_compliance:Improvement Actions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:soc2:A1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:soc2:CC1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:soc2:CC2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance report access", "target": "clause:soc2:CC5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance Reports", "target": "clause:cobit_2019:MEA03.03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance Reports", "target": "clause:coso_erm:Principle 20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance Reports", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance Reports", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance Reports", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance Reports", "target": "clause:iso_37301:9.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance Reports", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance Reports", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance Reports", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Compliance Reports", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:FedRAMP High Package", "target": "clause:google_compliance:FedRAMP High", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:FedRAMP High Package", "target": "clause:iso_27001:A.5.31", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:FedRAMP High Package", "target": "clause:microsoft_compliance:FedRAMP High & DoD IL5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:FedRAMP High Package", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:FedRAMP High Package", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:FedRAMP High Package", "target": "clause:openai_policies:Data residency commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:cobit_2019:APO10.03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:cobit_2019:APO11.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:cobit_2019:APO12.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:cobit_2019:APO14.01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:cobit_2019:BAI03.07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:cobit_2019:DSS06.03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:cobit_2019:MEA02.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:cobit_2019:MEA02.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:cobit_2019:MEA03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:cobit_2019:MEA03.01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:cobit_2019:MEA03.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:coso_erm:Component 5 \u2014 Reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:coso_erm:Principle 15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:coso_erm:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:coso_erm:Principle 20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:coso_erm:Principle 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:eu_ai_act:16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:eu_ai_act:23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:eu_ai_act:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:eu_ai_act:Annex IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:iso_27001:A.5.23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:iso_27001:A.5.33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:iso_27001:A.5.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:iso_27001:A.8.15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:iso_37301:6.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:iso_37301:7.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:iso_37301:9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:iso_37301:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:nist_csf:GV.PO-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:nist_csf:ID.AM-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:nist_csf:PR.DS-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:openai_policies:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:soc2:CC6.1, CC7.1, CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_artifact:Third-party audit report", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 content evaluation for arbitrary payloa", "target": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 content evaluation for arbitrary payloa", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 content evaluation for arbitrary payloa", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 content evaluation for arbitrary payloa", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 content evaluation for arbitrary payloa", "target": "clause:nist_ai_600_1:2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 content evaluation for arbitrary payloa", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 content evaluation for arbitrary payloa", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 per-request policy evaluation results", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 per-request policy evaluation results", "target": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 per-request policy evaluation results", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 per-request policy evaluation results", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 per-request policy evaluation results", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 per-request policy evaluation results", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 per-request policy evaluation results", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 per-request policy evaluation results", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 input screening", "target": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 input screening", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 input screening", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 input screening", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 input screening", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 input screening", "target": "clause:owasp_ai_exchange:anomalousinputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 input screening", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 input screening", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 per-request blocking (no agent suspension)", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 per-request blocking (no agent suspension)", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 per-request blocking (no agent suspension)", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 per-request blocking (no agent suspension)", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 per-request blocking (no agent suspension)", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 per-request blocking (no agent suspension)", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 per-request blocking (no agent suspension)", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "target": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "target": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 real-time policy screening", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 real-time policy screening", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 real-time policy screening", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 real-time policy screening", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 real-time policy screening", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 real-time policy screening", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 real-time policy screening", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 real-time policy screening", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters \u2014 real-time policy screening", "target": "clause:salesforce_trust:Toxicity detection \u2014 output scoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "target": "clause:mitre_atlas:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters applied to agent responses", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters applied to agent responses", "target": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters applied to agent responses", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters applied to agent responses", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters applied to agent responses", "target": "clause:mitre_atlas:AML.T0010", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Content filters applied to agent responses", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:eu_ai_act:14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:google_saif:Agent User Control (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:iso_31000:6.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:nist_ai_600_1:2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Sandbagging and Long-range Auto", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Contextual grounding checks", "target": "clause:salesforce_trust:Secure data retrieval, dynamic grounding, and toxicity detec", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics", "target": "clause:nist_rmf:MANAGE 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics and content filters", "target": "clause:eu_ai_act:14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics and content filters", "target": "clause:google_saif:Agent User Control (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics and content filters", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics and content filters", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics and content filters", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics and content filters", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics and content filters", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics and content filters", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics and content filters", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics and content filters", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Denied topics and content filters", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Guardrail trace in agent invocation output", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Guardrail trace in agent invocation output", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Guardrail trace in agent invocation output", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Guardrail trace in agent invocation output", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Guardrail trace in agent invocation output", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Guardrail trace in agent invocation output", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Guardrail trace in agent invocation output", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Guardrail trace in agent invocation output", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Guardrail trace in agent invocation output", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Sensitive information filters", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Sensitive information filters", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Sensitive information filters", "target": "clause:microsoft_rai:PS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Sensitive information filters", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Sensitive information filters", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Sensitive information filters", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Sensitive information filters", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Sensitive information filters", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Sensitive information filters", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Sensitive information filters", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_guardrails:Sensitive information filters", "target": "clause:salesforce_trust:Data masking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Guardrails \u2014 content filters and contextual grounding check", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Guardrails \u2014 content filters and contextual grounding check", "target": "clause:iso_27002:8.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Guardrails \u2014 content filters and contextual grounding check", "target": "clause:iso_42001:6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Guardrails \u2014 content filters and contextual grounding check", "target": "clause:openlineage:Run events (OpenLineage OpenAPI spec)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Guardrails \u2014 contextual grounding check", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Guardrails \u2014 contextual grounding check", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Guardrails \u2014 contextual grounding check", "target": "clause:google_vertex_rag:Check Grounding API", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Guardrails \u2014 contextual grounding check", "target": "clause:google_vertex_rag:Grounded generation \u2014 grounding supports and citations", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Guardrails \u2014 contextual grounding check", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base data source configuration", "target": "clause:c2pa:Content Credentials (C2PA manifests)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base data source configuration", "target": "clause:dama_dmbok:Ch. 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base data source configuration", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base data source configuration", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base data source configuration", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Data Source Configuration", "target": "clause:dama_dmbok:Ch. 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Data Source Configuration", "target": "clause:databricks_unity:Unity Catalog \u2014 External Locations and Credentials", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Data Source Configuration", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Data Source Configuration", "target": "clause:eu_ai_act:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Data Source Configuration", "target": "clause:iso_27002:5.19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Data Source Configuration", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Data Source Permissions", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Data Source Permissions", "target": "clause:iso_27002:5.15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Data Source Permissions", "target": "clause:iso_30401:4.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Data Source Permissions", "target": "clause:microsoft_azure_ai:Azure AI Search Security Filters", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Metrics and Evaluation", "target": "clause:dama_dmbok:Ch. 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Metrics and Evaluation", "target": "clause:iso_30401:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Metrics and Evaluation", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Base Metrics and Evaluation", "target": "clause:itil_4:\u00a75.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Bases \u2014 data source sync and ingestion job status", "target": "clause:dama_dmbok:Ch. 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Bases \u2014 data source sync and ingestion job status", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Bases \u2014 data source sync and ingestion job status", "target": "clause:google_vertex_rag:Vertex AI RAG \u2014 metadata filters at query time", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Bases \u2014 data source sync and ingestion job status", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Bases \u2014 Retrieve API relevance scores", "target": "clause:google_vertex_rag:Grounded generation \u2014 grounding support scores", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Bases \u2014 Retrieve API relevance scores", "target": "clause:iso_30401:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Bases \u2014 Retrieve API relevance scores", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Bases \u2014 Retrieve API relevance scores", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Bases audit logging and compliance", "target": "clause:dama_dmbok:Ch. 15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Bases audit logging and compliance", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Bases audit logging and compliance", "target": "clause:iso_30401:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_bedrock_kb:Knowledge Bases audit logging and compliance", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:bcbs_239:Principle 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:bcbs_239:Principle 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:bcbs_239:Principle 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:bcbs_239:Principle 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:bcbs_239:Principle 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:bcbs_239:Principle 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:coso_icfr:Component 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:coso_icfr:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:coso_icfr:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:coso_icfr:Principle 17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:coso_icfr:Principle 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:eu_ai_act:Annex III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:eu_ai_act:Annex IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:google_financial:Model Cards", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:omb_a_123:Section IV.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:omb_a_123:Section VI.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:pcaob_as_2201:\u00b6.20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:pcaob_as_2201:\u00b6.39", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:pcaob_as_2201:\u00b6.39-.42", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:pcaob_as_2201:\u00b6.68-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:pcaob_as_2201:\u00b6.72-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:sec_ai:Proposed rule, Release 34-97990 (withdrawn 2025-06-12)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:soc2:CC2.2 & CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:sox:\u00a7302(a)(4)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:sr26_2:\u00a7V (Outcomes Analysis)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Artifact", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:bcbs_239:Principle 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:bcbs_239:Principle 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:bcbs_239:Principle 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:bcbs_239:Principle 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:coso_icfr:Component 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:coso_icfr:Principle 12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:coso_icfr:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:coso_icfr:Principle 17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:coso_icfr:Principle 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:coso_icfr:Principle 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:coso_icfr:Principles 10-11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:coso_icfr:Principles 10-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:eu_ai_act:16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:eu_ai_act:49", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:eu_ai_act:53", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:finra:Regulatory Notice 24-09 (GenAI and LLMs)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:occ_ai:Model Risk Management booklet (2021)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:okta_financial:Okta Privileged Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:omb_a_123:Section III.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:omb_a_123:Section VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:pcaob_as_2201:\u00b6.14-.18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:pcaob_as_2201:\u00b6.39-.40", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:pcaob_as_2201:\u00b6.62-.70", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:soc2:CC2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:soc2:CC6.1, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sox:\u00a7301", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sox:\u00a7404(a)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sr26_2:\u00a7V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sr26_2:\u00a7V + \u00a7VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sr26_2:\u00a7VI (Model Inventory)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS Audit Manager", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:bcbs_239:Principle 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:bcbs_239:Principle 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:bcbs_239:Principles 2-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:coso_icfr:Component 3 \u2014 Control Activities", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:coso_icfr:Principles 16-17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:soc2:CC6.6, CC6.7, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:soc2:CC7.4, CC7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:sox:\u00a7302(a)(5)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS CloudTrail", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:cfpb_ai:Circular 2022-03 \u2014 adverse action for credit decisions based", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:coso_icfr:Component 1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:coso_icfr:Component 2 \u2014 Risk Assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:eu_ai_act:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:eu_ai_act:86", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:eu_ai_act:Annex III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:ffiec:IT Handbook \u2014 Development, Acquisition, and Maintenance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:omb_a_123:Section II.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:bcbs_239:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:bcbs_239:Principle 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:bcbs_239:Principle 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:bcbs_239:Principles 2 & 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:coso_icfr:Principle 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:coso_icfr:Principle 12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:coso_icfr:Principle 2 \u2014 Control Environment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:coso_icfr:Principle 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:coso_icfr:Principle 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:eu_ai_act:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:google_financial:Cloud IAM", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:okta_financial:Okta access management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:okta_financial:Okta Adaptive MFA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:okta_financial:Okta Privileged Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:omb_a_123:Section II.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:omb_a_123:Section II.B", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:soc2:CC7.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:soc2:PI1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:sr26_2:\u00a7V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "target": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Assume Role Audit Trail", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Assume Role Audit Trail", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Assume Role Audit Trail", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Assume Role Audit Trail", "target": "clause:nist_zt:Tenet 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Assume Role Audit Trail", "target": "clause:okta_iam:Okta System Log \u2014 Token Exchange Audit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Credential Sharing Detection", "target": "clause:iso_24760:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Credential Sharing Detection", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Credential Sharing Detection", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Credential Sharing Detection", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Credential Sharing Detection", "target": "clause:okta_iam:Okta \u2014 Concurrent Session Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity", "target": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Admin Activity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity", "target": "clause:nist_zt:Tenet 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity Validation", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity Validation", "target": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity Validation", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity Validation", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity Validation", "target": "clause:nist_zt:Tenet 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Organization Trail", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Organization Trail", "target": "clause:google_saif:Google Cloud Audit Logs \u2014 Organization Log Sink", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Organization Trail", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Organization Trail", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail \u2014 Organization Trail", "target": "clause:nist_zt:Tenet 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail Insights \u2014 Behavior Baseline", "target": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail Insights \u2014 Behavior Baseline", "target": "clause:google_saif:Google SAIF \u2014 Extend detection and response to AI (behaviora", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail Insights \u2014 Behavior Baseline", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail Insights \u2014 Behavior Baseline", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail Insights \u2014 Behavior Baseline", "target": "clause:nist_zt:Tenet 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS CloudTrail Insights \u2014 Behavior Baseline", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Machine Identity Baseline", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Automated Incident Response", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Automated Incident Response", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Automated Incident Response", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Automated Incident Response", "target": "clause:nist_zt:Tenet 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Automated Incident Response", "target": "clause:okta_iam:Okta Workflows \u2014 Identity Incident Response", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 IAM Finding Types", "target": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 IAM Finding Types", "target": "clause:google_saif:Google Security Command Center \u2014 Threat Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 IAM Finding Types", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 IAM Finding Types", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 IAM Finding Types", "target": "clause:nist_zt:Tenet 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 IAM Finding Types", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Anomalous Auth Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Instance Credential Exfiltration", "target": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Instance Credential Exfiltration", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Instance Credential Exfiltration", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Instance Credential Exfiltration", "target": "clause:nist_zt:Tenet 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Instance Credential Exfiltration", "target": "clause:okta_iam:Okta Adaptive MFA \u2014 Impossible Travel Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Privilege Escalation Findings", "target": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Privilege Escalation Findings", "target": "clause:google_saif:Google Security Command Center \u2014 privilege escalation detect", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Privilege Escalation Findings", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Privilege Escalation Findings", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS GuardDuty \u2014 Privilege Escalation Findings", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Break Glass Role", "target": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Break Glass Role", "target": "clause:nist_800_63:SP 800-63B-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Break Glass Role", "target": "clause:okta_iam:Okta Privileged Access \u2014 Break Glass", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Assume Conditions", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Assume Conditions", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Assume Conditions", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Assume Conditions", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Assume Conditions", "target": "clause:ping_identity:Ping Identity \u2014 Cross Organization Agent Auth", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Chaining", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Chaining", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Chaining", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Chaining", "target": "clause:oauth_bcp:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Chaining", "target": "clause:oauth_bcp:\u00a72.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Chaining", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Chaining", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core delegation chain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Trust Policies", "target": "clause:eidas2:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Trust Policies", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Trust Policies", "target": "clause:nist_800_63:SP 800-63C-4 \u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Cross Account Trust Policies", "target": "clause:ping_identity:Ping Identity \u2014 Federated Cross Org Authorization", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Identity Provider Federation", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Identity Provider Federation", "target": "clause:eidas2:19a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Identity Provider Federation", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Identity Provider Federation", "target": "clause:oidc_federation:\u00a79", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Identity Provider Federation", "target": "clause:okta_iam:Okta Universal Directory \u2014 Federation Trust Config", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Identity Provider Federation", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Trust Framework", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Permission Boundaries", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Permission Boundaries", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Permission Boundaries", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Permission Boundaries", "target": "clause:okta_iam:Okta Authorization Server \u2014 Scope Boundary Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Permission Boundaries", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Permission Boundaries", "target": "clause:ping_identity:PingFederate \u2014 Scope Reduction Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Privileged Role MFA Condition", "target": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Privileged Role MFA Condition", "target": "clause:nist_zt:\u00a75.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Privileged Role MFA Condition", "target": "clause:okta_iam:Okta Privileged Access \u2014 Zero Standing Privilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Privileged Role MFA Condition", "target": "clause:openid:RFC 9449", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Regional STS Endpoints", "target": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Regional STS Endpoints", "target": "clause:nist_800_63:SP 800-63B-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Regional STS Endpoints", "target": "clause:nist_zt:\u00a73.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Regional STS Endpoints", "target": "clause:okta_iam:Okta \u2014 Multi Region Resilience", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Role Deletion Revocation", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Role Deletion Revocation", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Role Deletion Revocation", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 Deprovisioning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Role Deletion Revocation", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent Gateway revocation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Role Deletion Revocation", "target": "clause:scim:RFC7644 \u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Role Session Revocation", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Role Session Revocation", "target": "clause:okta_iam:Okta OAuth \u2014 Token Revocation Propagation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Role Session Revocation", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM \u2014 Role Session Revocation", "target": "clause:scim:RFC7644 \u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Continuous Access Review", "target": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Continuous Access Review", "target": "clause:okta_iam:Okta Access Certifications \u2014 Service Account Reviews", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Continuous Access Review", "target": "clause:scim:RFC 7644 \u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Unused Access Findings", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Unused Access Findings", "target": "clause:iso_24760:7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Unused Access Findings", "target": "clause:okta_iam:Okta ISPM \u2014 Unmanaged Agent Discovery", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Unused Access Findings", "target": "clause:scim:RFC 7644 \u00a73.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Least Privilege", "target": "clause:google_saif:Google Cloud IAM Best Practices \u2014 Least Privilege Roles", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Least Privilege", "target": "clause:nist_800_63:SP 800-63B-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Least Privilege", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Least Privilege", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Least Privilege", "target": "clause:okta_iam:Okta for AI Agents \u2014 Minimum Privilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Least Privilege", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Separate Human Workload Identity", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Separate Human Workload Identity", "target": "clause:google_saif:Google Cloud IAM \u2014 Dedicated Service Accounts", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Separate Human Workload Identity", "target": "clause:iso_24760:7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Separate Human Workload Identity", "target": "clause:nist_800_63:SP 800-63-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Separate Human Workload Identity", "target": "clause:okta_iam:Okta Universal Directory \u2014 Human NHI Separation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Use Roles Not Users", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Use Roles Not Users", "target": "clause:nist_800_63:SP 800-63-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Use Roles Not Users", "target": "clause:okta_iam:Okta for AI Agents \u2014 Agent Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Use Roles Not Users", "target": "clause:owasp_nhi10:NHI1:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Use Roles Not Users", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Best Practices \u2014 Use Roles Not Users", "target": "clause:scim:RFC 7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 Certificate Binding", "target": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Keyless Authenti", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 Certificate Binding", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 Certificate Binding", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 Certificate Binding", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 Certificate Binding", "target": "clause:ping_identity:PingOne Credentials \u2014 Verifiable Credentials", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 HSM Integration", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 HSM Integration", "target": "clause:google_saif:Google Cloud IAM \u2014 HSM Service Account Keys", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 HSM Integration", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73.1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Tagging \u2014 Principal Tags", "target": "clause:nist_800_63:SP 800-63-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Tagging \u2014 Principal Tags", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Tagging \u2014 Principal Tags", "target": "clause:nist_zt:Tenet 1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Tagging \u2014 Principal Tags", "target": "clause:okta_iam:Okta for AI Agents \u2014 Capability Manifest", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Tagging \u2014 Resource Owner Tags", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Tagging \u2014 Resource Owner Tags", "target": "clause:nist_800_63:SP 800-63-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Tagging \u2014 Resource Owner Tags", "target": "clause:okta_iam:Okta for AI Agents \u2014 Owner Binding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS IAM Tagging \u2014 Resource Owner Tags", "target": "clause:scim:RFC 7643 \u00a74.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Organizations SCPs \u2014 Provisioning Restriction", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Organizations SCPs \u2014 Provisioning Restriction", "target": "clause:nist_800_63:SP 800-63A-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Organizations SCPs \u2014 Provisioning Restriction", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 Provisioning Gate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Organizations SCPs \u2014 Provisioning Restriction", "target": "clause:owasp_nhi10:NHI2:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Organizations SCPs \u2014 Provisioning Restriction", "target": "clause:owasp_nhi10:NHI5:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Organizations SCPs \u2014 Provisioning Restriction", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core provisioning gate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Organizations SCPs \u2014 Provisioning Restriction", "target": "clause:scim:RFC7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Organizations SCPs \u2014 Provisioning Restriction", "target": "clause:spiffe_spire:SVID \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Secrets Manager \u2014 Automated Rotation", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Secrets Manager \u2014 Automated Rotation", "target": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Short Lived Toke", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Secrets Manager \u2014 Automated Rotation", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Secrets Manager \u2014 Automated Rotation", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Secrets Manager \u2014 Automated Rotation", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Security Hub \u2014 Identity Security Metrics", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Security Hub \u2014 Identity Security Metrics", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Security Hub \u2014 Identity Security Metrics", "target": "clause:okta_iam:Okta Identity Governance \u2014 Program Metrics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Assume Role Session Policies", "target": "clause:google_saif:Google Cloud WIF \u2014 STS Token Exchange", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Assume Role Session Policies", "target": "clause:nist_800_63:SP 800-63B-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Assume Role Session Policies", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Assume Role Session Policies", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Assume Role Session Policies", "target": "clause:okta_iam:Okta Cross App Access \u2014 Identity Assertion Authorization Gra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Assume Role Session Policies", "target": "clause:openid:RFC 9396 \u00a76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Role Chaining Session Policy", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Role Chaining Session Policy", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Role Chaining Session Policy", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Role Chaining Session Policy", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Delegation Depth Limit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Session Policies Task Scoped", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Session Policies Task Scoped", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Session Policies Task Scoped", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Session Policies Task Scoped", "target": "clause:okta_iam:Okta Cross App Access \u2014 task-scoped resource tokens (RFC 869", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS STS \u2014 Session Policies Task Scoped", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Trusted Advisor \u2014 Exposed Access Keys / Amazon GuardDuty", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Trusted Advisor \u2014 Exposed Access Keys / Amazon GuardDuty", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Trusted Advisor \u2014 Exposed Access Keys / Amazon GuardDuty", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Trusted Advisor \u2014 Exposed Access Keys / Amazon GuardDuty", "target": "clause:nist_zt:Tenet 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Trusted Advisor \u2014 Exposed Access Keys / Amazon GuardDuty", "target": "clause:okta_iam:Okta ISPM \u2014 Credential Exposure Scanning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Well-Architected SEC02-BP03 \u2014 Secrets Management", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Well-Architected SEC02-BP03 \u2014 Secrets Management", "target": "clause:google_saif:Google Cloud Secret Manager \u2014 Credential Hygiene", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Well-Architected SEC02-BP03 \u2014 Secrets Management", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Well-Architected SEC02-BP03 \u2014 Secrets Management", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Well-Architected SEC02-BP03 \u2014 Secrets Management", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Well-Architected Security Pillar \u2014 SEC02 (identity and a", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Well-Architected Security Pillar \u2014 SEC02 (identity and a", "target": "clause:google_saif:Google SAIF \u2014 Expand strong security foundations (least-priv", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Well-Architected Security Pillar \u2014 SEC02 (identity and a", "target": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Well-Architected Security Pillar \u2014 SEC02 (identity and a", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Well-Architected Security Pillar \u2014 SEC02 (identity and a", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_iam:AWS Well-Architected Security Pillar \u2014 SEC02 (identity and a", "target": "clause:okta_iam:Okta for AI Agents \u2014 Assurance Levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:Amazon Macie", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:Amazon Macie", "target": "clause:iso_27701:6.5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:Amazon Macie", "target": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:Amazon Macie", "target": "clause:nist_pf:ID.IM-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:Amazon Macie", "target": "clause:owasp_ai_exchange:segregatedata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:Amazon S3 \u2014 Object Integrity and Checksums", "target": "clause:cobit_2019:DSS04.07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:Amazon S3 \u2014 Object Integrity and Checksums", "target": "clause:dama_dmbok:Ch. 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:Amazon S3 \u2014 Object Integrity and Checksums", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:Amazon S3 \u2014 Object Integrity and Checksums", "target": "clause:google_dataplex:Cloud Storage \u2014 Object Integrity and Retention Lock", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:Amazon S3 \u2014 Object Integrity and Checksums", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:AWS Glue Data Quality (DQDL rulesets)", "target": "clause:cobit_2019:BAI03.08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:AWS Glue Data Quality (DQDL rulesets)", "target": "clause:dama_dmbok:Ch. 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:AWS Glue Data Quality (DQDL rulesets)", "target": "clause:databricks_unity:Lakehouse Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:AWS Glue Data Quality (DQDL rulesets)", "target": "clause:dcam:Capability 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:AWS Glue Schema Registry", "target": "clause:cobit_2019:APO12.06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:AWS Glue Schema Registry", "target": "clause:dama_dmbok:Ch. 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:AWS Glue Schema Registry", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:AWS Glue Schema Registry", "target": "clause:google_dataplex:Dataplex Auto Data Quality (scheduled/batch scans)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:AWS Glue Schema Registry", "target": "clause:nist_pf:PR.DS-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_lake_formation:AWS Glue Schema Registry", "target": "clause:owasp_ai_exchange:runtimemodeliointegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:Amazon Bedrock Policies \u2014 Organization-Level Guardrail Enfor", "target": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:Amazon Bedrock Policies \u2014 Organization-Level Guardrail Enfor", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:Amazon Bedrock Policies \u2014 Organization-Level Guardrail Enfor", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Resource Constraint Enfor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:Amazon Bedrock Policies \u2014 Organization-Level Guardrail Enfor", "target": "clause:iso_42001:6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:Amazon Bedrock Policies \u2014 Organization-Level Guardrail Enfor", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:Amazon Bedrock Policies \u2014 Organization-Level Guardrail Enfor", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Model Deployment Restriction and Content S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:Amazon Bedrock Policies \u2014 Organization-Level Guardrail Enfor", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 Compliance Documentation for Contractual Obli", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Regulatory Obligation Constraint", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 Compliance Documentation for Contractual Obli", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 Compliance Documentation for Contractual Obli", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 Compliance Documentation for Contractual Obli", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 Compliance Documentation for Contractual Obli", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 Compliance Documentation for Contractual Obli", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 Contract Review Gate Documentation", "target": "clause:google_org_policy:Google Cloud Security Foundations Blueprint \u2014 Pre-Deployment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 Contract Review Gate Documentation", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 Contract Review Gate Documentation", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 Contract Review Gate Documentation", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 Contract Review Gate Documentation", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 Contract Review Gate Documentation", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 On-Demand Regulatory Compliance Disclosure", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 On-Demand Regulatory Compliance Disclosure", "target": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report + Purview \u2014 Dis", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 On-Demand Regulatory Compliance Disclosure", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 On-Demand Regulatory Compliance Disclosure", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Disclosure and G", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Artifact \u2014 On-Demand Regulatory Compliance Disclosure", "target": "clause:soc2:CC2.3 / CC7.4 \u2014 External communication and incident response", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Attestation Artifact Ge", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Attestation Artifact Ge", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Attestation Artifact Ge", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Attestation Artifact Ge", "target": "clause:okta_authz:Okta Authorization Server \u2014 Signed Token Claims as Authoriza", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Attestation Artifact Ge", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 System Cards and Safeguards Repo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Attestation Artifact Ge", "target": "clause:soc2:CC3.1 \u2014 COSO Principle 6 \u2014 Specifies suitable objectives", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Evidence Archive", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Evidence Archive", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Evidence Archive", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Evidence Archive", "target": "clause:nist_800_53:AU-11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Evidence Archive", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Documented Evalu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Contract Compliance Evidence Collection", "target": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Contract Compliance Evidence Collection", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Continuous Regulatory Contract Co", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Contract Compliance Evidence Collection", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Contract Compliance Evidence Collection", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Regulatory Template C", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Contract Compliance Evidence Collection", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Deployment Scope Evidence Collection", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Deployment Scope Evidence Collection", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Deployment Scope Evidence Collection", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Deployment Scope Evidence Collection", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Deployment Scope Evidence Collection", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Internal Audit Evidence Package Generati", "target": "clause:google_org_policy:Google Cloud Audit Logs + Policy Analyzer \u2014 Internal Audit E", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Internal Audit Evidence Package Generati", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Internal Audit Evidence Package Generati", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Internal Audit Evidence Package Generati", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Structured Internal A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Internal Audit Evidence Package Generati", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Internal Audit Evidence Package Generati", "target": "clause:okta_authz:Okta System Log Compliance Reports \u2014 Authorization Audit Evi", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager \u2014 Internal Audit Evidence Package Generati", "target": "clause:soc2:CC4.1 \u2014 COSO Principle 16 \u2014 ongoing and/or separate evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager Custom Frameworks \u2014 Board-Ready Governance", "target": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager Custom Frameworks \u2014 Board-Ready Governance", "target": "clause:microsoft_rai:Microsoft RAI Transparency Report \u2014 Board Governance Disclos", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager Custom Frameworks \u2014 Board-Ready Governance", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager Custom Frameworks \u2014 Board-Ready Governance", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Audit Manager Custom Frameworks \u2014 Board-Ready Governance", "target": "clause:soc2:CC2.3 \u2014 Communicates with external parties", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Break-Glass Account Procedure \u2014 SCP Exception with Full", "target": "clause:google_org_policy:Google Cloud PAM Emergency Access \u2014 Justified Time-Bounded B", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Break-Glass Account Procedure \u2014 SCP Exception with Full", "target": "clause:iso_37301:\u00a7 4.6 \u2014 Compliance risk assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Break-Glass Account Procedure \u2014 SCP Exception with Full", "target": "clause:microsoft_rai:Azure PIM Emergency Access \u2014 Governed Break-Glass Activation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Break-Glass Account Procedure \u2014 SCP Exception with Full", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Break-Glass Account Procedure \u2014 SCP Exception with Full", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Break-Glass Account Procedure \u2014 SCP Exception with Full", "target": "clause:okta_authz:Okta Privileged Access + Okta Workflows \u2014 Emergency Override", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail \u2014 Principal Accountability Binding for All AP", "target": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail \u2014 Principal Accountability Binding for All AP", "target": "clause:eu_ai_act:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail \u2014 Principal Accountability Binding for All AP", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail \u2014 Principal Accountability Binding for All AP", "target": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Non-Repudiable Principal Binding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail \u2014 Principal Accountability Binding for All AP", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail \u2014 Principal Accountability Binding for All AP", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Principal Accountability for AI Ac", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail \u2014 Principal Accountability Binding for All AP", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail \u2014 Principal Accountability Binding for All AP", "target": "clause:okta_authz:Okta Identity Tokens \u2014 Principal Identity Binding for AI Age", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Immutable Contract Audit Tr", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Immutable Contract Audit Tr", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Contract Obligation Audit Trail Re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Immutable Contract Audit Tr", "target": "clause:nist_800_53:AU-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Immutable Contract Audit Tr", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Contract Authorization Evid", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Immutable Contract Audit Tr", "target": "clause:soc2:CC7.2 \u2014 Monitoring of system components", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Procurement Audit Trail", "target": "clause:google_org_policy:Google Cloud Admin Activity Audit Logs \u2014 Procurement Event R", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Procurement Audit Trail", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Procurement Audit Trail", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Procurement Audit Trail", "target": "clause:nist_800_53:AU-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Procurement Audit Trail", "target": "clause:okta_authz:Okta System Log \u2014 Identity-Mediated Procurement Authorizatio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Procurement Audit Trail", "target": "clause:soc2:CC7.2 \u2014 Detection and Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Tamper-Evident Approval Rec", "target": "clause:coso_erm:Principle 13 \u2014 Implements Risk Responses", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Tamper-Evident Approval Rec", "target": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Immutable Approval Event Records", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Tamper-Evident Approval Rec", "target": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Tamper-Evident Approval Rec", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Unified AI Authorization Audit Tra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Tamper-Evident Approval Rec", "target": "clause:nist_800_53:AU-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Tamper-Evident Approval Rec", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Authorization Decision Reco", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Tamper-Evident Approval Rec", "target": "clause:soc2:CC7.2 \u2014 The entity monitors system components for anomalies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + EventBridge \u2014 SCP and IAM Policy Change Det", "target": "clause:google_org_policy:Google Cloud Asset Inventory + Pub/Sub \u2014 Real-Time Policy Ch", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + EventBridge \u2014 SCP and IAM Policy Change Det", "target": "clause:iso_37301:\u00a7 6.3 \u2014 Planning of changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + EventBridge \u2014 SCP and IAM Policy Change Det", "target": "clause:iso_42001:6.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + EventBridge \u2014 SCP and IAM Policy Change Det", "target": "clause:microsoft_rai:Azure Event Grid \u2014 AI Governance Policy Change Alerts", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + EventBridge \u2014 SCP and IAM Policy Change Det", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS CloudTrail + EventBridge \u2014 SCP and IAM Policy Change Det", "target": "clause:okta_authz:Okta Event Hooks \u2014 Authorization Policy Change Notifications", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Configuration Drift Detection for Knowledge Res", "target": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Version Mo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Configuration Drift Detection for Knowledge Res", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Configuration Drift Detection for Knowledge Res", "target": "clause:microsoft_rai:Azure Machine Learning \u2014 Model and Data Version Tracking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Configuration Drift Detection for Knowledge Res", "target": "clause:nist_800_53:CM-3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Configuration Drift Detection for Knowledge Res", "target": "clause:nist_rmf:MAP 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Contractual Requirement Conflict Detection", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Sovereign Compliance Conflict Det", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Contractual Requirement Conflict Detection", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Contractual Requirement Conflict Detection", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Contractual Requirement Conflict Detection", "target": "clause:microsoft_rai:Microsoft Purview Compliance Solutions \u2014 Contractual Conflic", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Contractual Requirement Conflict Detection", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Contractual Requirement Conflict Detection", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Knowledge Resource Configuration Drift Detectio", "target": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Change Det", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Knowledge Resource Configuration Drift Detectio", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Knowledge Resource Configuration Drift Detectio", "target": "clause:microsoft_rai:Azure Machine Learning Model Monitoring \u2014 Knowledge Source S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Knowledge Resource Configuration Drift Detectio", "target": "clause:nist_800_53:CM-3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config \u2014 Knowledge Resource Configuration Drift Detectio", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config + Security Hub \u2014 Continuous Policy Adherence Moni", "target": "clause:coso_erm:Principle 9 \u2014 Formulates business objectives", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config + Security Hub \u2014 Continuous Policy Adherence Moni", "target": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies + Policy Sim", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config + Security Hub \u2014 Continuous Policy Adherence Moni", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config + Security Hub \u2014 Continuous Policy Adherence Moni", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config + Security Hub \u2014 Continuous Policy Adherence Moni", "target": "clause:microsoft_rai:Azure Policy Compliance Dashboard \u2014 AI Workload Policy Adher", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config + Security Hub \u2014 Continuous Policy Adherence Moni", "target": "clause:nist_rmf:MEASURE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config + Security Hub \u2014 Continuous Policy Adherence Moni", "target": "clause:okta_authz:Okta System Log \u2014 Authorization Policy Adherence Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config Continuous Compliance \u2014 Contract Obligation Monit", "target": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config Continuous Compliance \u2014 Contract Obligation Monit", "target": "clause:google_org_policy:Google Cloud Asset Inventory + Organization Policy \u2014 Ongoing", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config Continuous Compliance \u2014 Contract Obligation Monit", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config Continuous Compliance \u2014 Contract Obligation Monit", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config Continuous Compliance \u2014 Contract Obligation Monit", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Custom Assessments fo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config Continuous Compliance \u2014 Contract Obligation Monit", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config Rules + CloudTrail Alerting \u2014 Authority Limit Vio", "target": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config Rules + CloudTrail Alerting \u2014 Authority Limit Vio", "target": "clause:google_org_policy:Google Cloud Organization Policy Monitoring \u2014 Authority Boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config Rules + CloudTrail Alerting \u2014 Authority Limit Vio", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config Rules + CloudTrail Alerting \u2014 Authority Limit Vio", "target": "clause:microsoft_rai:Microsoft Defender for Cloud \u2014 AI Workload Posture and Threa", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config Rules + CloudTrail Alerting \u2014 Authority Limit Vio", "target": "clause:nist_800_53:AU-6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config Rules + CloudTrail Alerting \u2014 Authority Limit Vio", "target": "clause:nist_rmf:MEASURE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Config Rules + CloudTrail Alerting \u2014 Authority Limit Vio", "target": "clause:okta_authz:Okta System Log + Identity Governance Reports \u2014 Authority Li", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower + Marketplace Governance \u2014 Third-Party Pol", "target": "clause:google_org_policy:Google Cloud Org Policy \u2014 Third-Party Integration Restrictio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower + Marketplace Governance \u2014 Third-Party Pol", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower + Marketplace Governance \u2014 Third-Party Pol", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower + Marketplace Governance \u2014 Third-Party Pol", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower + Marketplace Governance \u2014 Third-Party Pol", "target": "clause:oecd_cg:II.F / IV.A \u2014 Related party transactions \u2014 approval and disc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Detective Controls \u2014 Policy Violation Esca", "target": "clause:coso_erm:Principle 15 \u2014 Assesses Substantial Change", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Detective Controls \u2014 Policy Violation Esca", "target": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Multi-Level Approva", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Detective Controls \u2014 Policy Violation Esca", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Detective Controls \u2014 Policy Violation Esca", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Detective Controls \u2014 Policy Violation Esca", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Detective Controls \u2014 Policy Violation Esca", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Detective Controls \u2014 Policy Violation Esca", "target": "clause:okta_authz:Okta Workflows \u2014 Automated Escalation Gate Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Landing Zone \u2014 Centralized Policy Registry", "target": "clause:google_org_policy:Google Cloud Organization Policy Service \u2014 Centralized Machi", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Landing Zone \u2014 Centralized Policy Registry", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Landing Zone \u2014 Centralized Policy Registry", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Landing Zone \u2014 Centralized Policy Registry", "target": "clause:microsoft_rai:Azure Policy Initiative Assignments \u2014 AI Policy Register Imp", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Landing Zone \u2014 Centralized Policy Registry", "target": "clause:nist_800_53:PL-1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Landing Zone \u2014 Centralized Policy Registry", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Landing Zone \u2014 Centralized Policy Registry", "target": "clause:opa_rego:OPA Policy Language documentation (Rego)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Proactive Controls \u2014 Change Governance", "target": "clause:coso_erm:Principle 17 \u2014 Pursues Improvement in Enterprise Risk Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Proactive Controls \u2014 Change Governance", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Proactive Controls \u2014 Change Governance", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Policy Simulation for Con", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Proactive Controls \u2014 Change Governance", "target": "clause:iso_42001:6.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Proactive Controls \u2014 Change Governance", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Control Tower Proactive Controls \u2014 Change Governance", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS IAM Permission Boundaries \u2014 Delegation Scope Enforcement", "target": "clause:coso_erm:Principle 2 \u2014 Establishes Operating Structures", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS IAM Permission Boundaries \u2014 Delegation Scope Enforcement", "target": "clause:google_org_policy:Google Cloud IAM Resource Hierarchy \u2014 Inherited Authority Li", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS IAM Permission Boundaries \u2014 Delegation Scope Enforcement", "target": "clause:iso_37301:\u00a7 7.2 \u2014 Competence", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS IAM Permission Boundaries \u2014 Delegation Scope Enforcement", "target": "clause:iso_42001:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS IAM Permission Boundaries \u2014 Delegation Scope Enforcement", "target": "clause:microsoft_rai:Azure RBAC \u2014 Authority Delegation Hierarchy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS IAM Permission Boundaries \u2014 Delegation Scope Enforcement", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS IAM Permission Boundaries \u2014 Delegation Scope Enforcement", "target": "clause:okta_authz:Okta Authorization Server \u2014 OAuth 2.0 Delegation Constraints", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Marketplace + Control Tower \u2014 Procurement Policy Integra", "target": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Marketplace + Control Tower \u2014 Procurement Policy Integra", "target": "clause:google_org_policy:Google Cloud Marketplace + Org Policy \u2014 Approved AI Service", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Marketplace + Control Tower \u2014 Procurement Policy Integra", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Marketplace + Control Tower \u2014 Procurement Policy Integra", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Marketplace + Control Tower \u2014 Procurement Policy Integra", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Marketplace + Partner Network \u2014 Vendor Qualification Fra", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Compliance-Certified Service Rest", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Marketplace + Partner Network \u2014 Vendor Qualification Fra", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Marketplace + Partner Network \u2014 Vendor Qualification Fra", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Marketplace + Partner Network \u2014 Vendor Qualification Fra", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Marketplace + Partner Network \u2014 Vendor Qualification Fra", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations + CloudTrail \u2014 SCP Change History and IaC-", "target": "clause:google_org_policy:Google Cloud Organization Policy Dry-Run \u2014 Safe Policy Versi", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations + CloudTrail \u2014 SCP Change History and IaC-", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations + CloudTrail \u2014 SCP Change History and IaC-", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations + CloudTrail \u2014 SCP Change History and IaC-", "target": "clause:microsoft_rai:Azure Resource Manager Policy Versioning \u2014 Automated Policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations + CloudTrail \u2014 SCP Change History and IaC-", "target": "clause:nist_800_53:CM-3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations + CloudTrail \u2014 SCP Change History and IaC-", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP \u2014 Approved Data Source Restriction", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Service Usage Restriction", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP \u2014 Approved Data Source Restriction", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP \u2014 Approved Data Source Restriction", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP \u2014 Approved Data Source Restriction", "target": "clause:microsoft_rai:Microsoft Purview \u2014 Data Governance for AI Knowledge Sources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP \u2014 Approved Data Source Restriction", "target": "clause:nist_rmf:MAP 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP \u2014 Approved Data Source Restriction", "target": "clause:okta_authz:Okta Fine-Grained Authorization \u2014 Knowledge Resource Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + Amazon Macie \u2014 Data Use Policy Enfor", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + Amazon Macie \u2014 Data Use Policy Enfor", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Data Sovereignty and Use Restrict", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + Amazon Macie \u2014 Data Use Policy Enfor", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + Amazon Macie \u2014 Data Use Policy Enfor", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + Amazon Macie \u2014 Data Use Policy Enfor", "target": "clause:microsoft_rai:Azure Policy + Microsoft Purview Data Governance \u2014 Automated", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + Amazon Macie \u2014 Data Use Policy Enfor", "target": "clause:nist_800_53:AC-23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 AI-Initiated Financial", "target": "clause:coso_erm:Principle 7 \u2014 Defines risk appetite", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 AI-Initiated Financial", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 AI-Initiated Financial", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Resource Provisioning Commitment Approval", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 AI-Initiated Financial", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 AI-Initiated Financial", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 AI-Initiated Financial", "target": "clause:okta_authz:Okta Authorization Server \u2014 Commitment-Scoped Token Restrict", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 Approval Limit Control", "target": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 Approval Limit Control", "target": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Approval-Gated Elev", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 Approval Limit Control", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 Approval Limit Control", "target": "clause:microsoft_rai:Azure Policy Custom Definitions \u2014 AI Action Approval Thresho", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 Approval Limit Control", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 Approval Limit Control", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 Approval Limit Control", "target": "clause:okta_authz:Okta Authorization Server \u2014 Time-Bounded Approval-Scoped Tok", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP Design \u2014 Scope Boundary Enforcement", "target": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP Design \u2014 Scope Boundary Enforcement", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP Design \u2014 Scope Boundary Enforcement", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP Design \u2014 Scope Boundary Enforcement", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP Design \u2014 Scope Boundary Enforcement", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Organizations SCP Design \u2014 Scope Boundary Enforcement", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Tracked Categories and Deploymen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Resource Access Manager \u2014 Cross-Account Share Acceptance", "target": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Resource Access Manager \u2014 Cross-Account Share Acceptance", "target": "clause:google_org_policy:Google Cloud PAM Multi-Level Approval \u2014 Dual-Authorization W", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Resource Access Manager \u2014 Cross-Account Share Acceptance", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Resource Access Manager \u2014 Cross-Account Share Acceptance", "target": "clause:microsoft_rai:Azure DevOps Required Reviewers \u2014 Multi-Party AI Deployment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Resource Access Manager \u2014 Cross-Account Share Acceptance", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Resource Access Manager \u2014 Cross-Account Share Acceptance", "target": "clause:okta_authz:Okta Workflows \u2014 Multi-Party Token Approval Chains", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS SCP \u2014 AI Agent External Communication Service Restrictio", "target": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS SCP \u2014 AI Agent External Communication Service Restrictio", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS SCP \u2014 AI Agent External Communication Service Restrictio", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS SCP \u2014 AI Agent External Communication Service Restrictio", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS SCP \u2014 AI Agent External Communication Service Restrictio", "target": "clause:openai_preparedness:OpenAI Usage Policies \u2014 Permitted Use and Representation Gov", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub \u2014 Cross-Domain Policy Evidence Normalizatio", "target": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Cross-Domain Evidence", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub \u2014 Cross-Domain Policy Evidence Normalizatio", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub \u2014 Cross-Domain Policy Evidence Normalizatio", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub \u2014 Cross-Domain Policy Evidence Normalizatio", "target": "clause:microsoft_rai:Microsoft Defender for Cloud + Purview \u2014 Cross-Domain Policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub \u2014 Cross-Domain Policy Evidence Normalizatio", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub \u2014 Policy Incident Classification and Routin", "target": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub \u2014 Policy Incident Classification and Routin", "target": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Policy Violation Tria", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub \u2014 Policy Incident Classification and Routin", "target": "clause:iso_37301:8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub \u2014 Policy Incident Classification and Routin", "target": "clause:microsoft_rai:Microsoft Sentinel \u2014 AI Policy Incident Classification and S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub \u2014 Policy Incident Classification and Routin", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub \u2014 Policy Incident Classification and Routin", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub + Audit Manager \u2014 Policy Governance Reports", "target": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub + Audit Manager \u2014 Policy Governance Reports", "target": "clause:google_org_policy:Google Cloud Organization Policy + Cloud Asset Inventory \u2014 G", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub + Audit Manager \u2014 Policy Governance Reports", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub + Audit Manager \u2014 Policy Governance Reports", "target": "clause:microsoft_rai:Microsoft Purview + Azure Policy Compliance Reports \u2014 AI Gov", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub + Audit Manager \u2014 Policy Governance Reports", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (oversight, acc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub Findings History \u2014 Policy Improvement Input", "target": "clause:coso_erm:Principle 20 \u2014 Reports on risk, culture, and performance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub Findings History \u2014 Policy Improvement Input", "target": "clause:google_org_policy:Google Cloud IAM Recommender \u2014 Least-Privilege Policy Improv", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub Findings History \u2014 Policy Improvement Input", "target": "clause:iso_37301:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub Findings History \u2014 Policy Improvement Input", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub Findings History \u2014 Policy Improvement Input", "target": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report \u2014 Systematic Le", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Security Hub Findings History \u2014 Policy Improvement Input", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Service Level Agreements + CloudWatch \u2014 SLA Governance", "target": "clause:google_org_policy:Google Cloud SLA Terms + Assured Workloads \u2014 Commitment Enfo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Service Level Agreements + CloudWatch \u2014 SLA Governance", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Service Level Agreements + CloudWatch \u2014 SLA Governance", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Service Level Agreements + CloudWatch \u2014 SLA Governance", "target": "clause:microsoft_rai:Azure SLA + Azure Monitor \u2014 SLA Commitment Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Service Level Agreements + CloudWatch \u2014 SLA Governance", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:AWS Service Level Agreements + CloudWatch \u2014 SLA Governance", "target": "clause:soc2:A1.1 \u2014 Capacity management and monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:CloudTrail + AWS GuardDuty \u2014 Behavioral Anomaly Detection fo", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:CloudTrail + AWS GuardDuty \u2014 Behavioral Anomaly Detection fo", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:CloudTrail + AWS GuardDuty \u2014 Behavioral Anomaly Detection fo", "target": "clause:microsoft_rai:Azure AI Foundry Observability \u2014 Operating Intent Drift Moni", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:CloudTrail + AWS GuardDuty \u2014 Behavioral Anomaly Detection fo", "target": "clause:nist_800_53:SI-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:CloudTrail + AWS GuardDuty \u2014 Behavioral Anomaly Detection fo", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_organizations:CloudTrail + AWS GuardDuty \u2014 Behavioral Anomaly Detection fo", "target": "clause:okta_authz:Okta Behavior Detection + System Log \u2014 Sign-In Anomaly Signa", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Cognito and AWS IAM \u2014 identity verification capabilit", "target": "clause:ccpa:1798.130", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Cognito and AWS IAM \u2014 identity verification capabilit", "target": "clause:ccpa:1798.140", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Cognito and AWS IAM \u2014 identity verification capabilit", "target": "clause:gdpr:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Cognito and AWS IAM \u2014 identity verification capabilit", "target": "clause:nist_pf:PR.AC-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Cognito and AWS IAM \u2014 identity verification capabilit", "target": "clause:okta_iam:Okta Universal Directory and authentication policies \u2014 ident", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Comprehend \u2014 PII detection and redaction", "target": "clause:edpb_opinion_28_2024:3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Comprehend \u2014 PII detection and redaction", "target": "clause:gdpr:32", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Comprehend \u2014 PII detection and redaction", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 output inspection a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Comprehend \u2014 PII detection and redaction", "target": "clause:microsoft_rai:Microsoft Purview Data Loss Prevention \u2014 generative AI app c", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Comprehend \u2014 PII detection and redaction", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Comprehend \u2014 PII detection and redaction", "target": "clause:nist_pf:PR.DS-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Comprehend \u2014 PII detection and redaction", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Macie \u2014 sensitive data discovery and anomaly findings", "target": "clause:ccpa:1798.150", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Macie \u2014 sensitive data discovery and anomaly findings", "target": "clause:gdpr:33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Macie \u2014 sensitive data discovery and anomaly findings", "target": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Macie \u2014 sensitive data discovery and anomaly findings", "target": "clause:microsoft_rai:Microsoft Purview Insider Risk Management \u2014 risky data-handl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Macie \u2014 sensitive data discovery and anomaly findings", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Macie \u2014 sensitive data discovery and anomaly findings", "target": "clause:nist_pf:PR.DS-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Macie \u2014 sensitive data discovery and anomaly findings", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Macie Sensitive Data Discovery", "target": "clause:ccpa:1798.121", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Macie Sensitive Data Discovery", "target": "clause:edpb_opinion_28_2024:3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Macie Sensitive Data Discovery", "target": "clause:gdpr:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Macie Sensitive Data Discovery", "target": "clause:google_saif:Google Cloud Sensitive Data Protection (Cloud DLP)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Macie Sensitive Data Discovery", "target": "clause:microsoft_rai:Microsoft Purview Information Protection Classification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon Macie Sensitive Data Discovery", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Ground Truth \u2014 synthetic data generation", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Ground Truth \u2014 synthetic data generation", "target": "clause:gdpr:4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Ground Truth \u2014 synthetic data generation", "target": "clause:google_saif:Privacy Enhancing Technologies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Ground Truth \u2014 synthetic data generation", "target": "clause:nist_pf:CT.DP-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Ground Truth \u2014 synthetic data generation", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 data and model quality drif", "target": "clause:edpb_opinion_28_2024:3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 data and model quality drif", "target": "clause:gdpr:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 data and model quality drif", "target": "clause:google_saif:Inferred Sensitive Data risk \u2014 Output Validation and Sanitiz", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 data and model quality drif", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 data and model quality drif", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 data and model quality drif", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 data and model quality drif", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 inference quality monitorin", "target": "clause:gdpr:32", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 inference quality monitorin", "target": "clause:google_saif:Sensitive Data Disclosure risk \u2014 Output Validation and Sanit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 inference quality monitorin", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 inference quality monitorin", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 inference quality monitorin", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 inference quality monitorin", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Artifact \u2014 jurisdiction-organized compliance reports and", "target": "clause:ccpa:1798.135", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Artifact \u2014 jurisdiction-organized compliance reports and", "target": "clause:gdpr:30", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Artifact \u2014 jurisdiction-organized compliance reports and", "target": "clause:microsoft_rai:Microsoft EU Data Boundary and Jurisdiction-Specific DPAs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Artifact \u2014 jurisdiction-organized compliance reports and", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Artifact \u2014 jurisdiction-organized compliance reports and", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Artifact \u2014 jurisdiction-organized compliance reports and", "target": "clause:uk_duaa:Data protection complaints procedure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Artifact \u2014 on-demand compliance reports", "target": "clause:gdpr:38", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Artifact \u2014 on-demand compliance reports", "target": "clause:iso_27701:5.7.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Artifact \u2014 on-demand compliance reports", "target": "clause:microsoft_rai:Microsoft Privacy Report \u2014 periodic privacy governance discl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Audit Manager \u2014 framework-based assessments", "target": "clause:gdpr:24", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Audit Manager \u2014 framework-based assessments", "target": "clause:google_saif:Core element \u2014 Adapt controls to adjust mitigations and crea", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Audit Manager \u2014 framework-based assessments", "target": "clause:iso_27701:5.7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Audit Manager \u2014 framework-based assessments", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 compliance score and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Audit Manager \u2014 framework-based assessments", "target": "clause:nist_pf:GV.MT-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail \u2014 API event logging", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail \u2014 API event logging", "target": "clause:iso_27701:7.3.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail \u2014 API event logging", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail \u2014 API event logging", "target": "clause:okta_iam:Okta System Log \u2014 real-time audit events", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail \u2014 API event logging", "target": "clause:openai_privacy:OpenAI privacy request records", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail \u2014 immutable governance logging", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail \u2014 immutable governance logging", "target": "clause:iso_27701:7.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail \u2014 immutable governance logging", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence archive", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail \u2014 immutable governance logging", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail with S3 Object Lock \u2014 WORM evidence archive", "target": "clause:gdpr:32", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail with S3 Object Lock \u2014 WORM evidence archive", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail with S3 Object Lock \u2014 WORM evidence archive", "target": "clause:iso_27701:6.9.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail with S3 Object Lock \u2014 WORM evidence archive", "target": "clause:iso_27701:7.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail with S3 Object Lock \u2014 WORM evidence archive", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 control evidence coll", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail with S3 Object Lock \u2014 WORM evidence archive", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence collection a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS CloudTrail with S3 Object Lock \u2014 WORM evidence archive", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Config custom rules \u2014 configuration compliance checks", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Config custom rules \u2014 configuration compliance checks", "target": "clause:google_saif:Unauthorized Training Data risk \u2014 Training Data Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Config custom rules \u2014 configuration compliance checks", "target": "clause:iso_27701:7.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Config custom rules \u2014 configuration compliance checks", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 accountability and on", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Config custom rules \u2014 configuration compliance checks", "target": "clause:nist_pf:GV.MT-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Config custom rules \u2014 configuration compliance checks", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Customer Compliance Center \u2014 regulatory resources", "target": "clause:ccpa:1798.140", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Customer Compliance Center \u2014 regulatory resources", "target": "clause:cnil_ai:How-to sheet 2 \u2014 Defining a purpose", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Customer Compliance Center \u2014 regulatory resources", "target": "clause:dpdp:3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Customer Compliance Center \u2014 regulatory resources", "target": "clause:gdpr:3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Customer Compliance Center \u2014 regulatory resources", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Customer Compliance Center \u2014 regulatory resources", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 regulatory assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Customer Compliance Center \u2014 regulatory resources", "target": "clause:openai_privacy:OpenAI trust and compliance documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Customer Compliance Center \u2014 regulatory resources", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS data lifecycle management \u2014 S3 Lifecycle and RDS retenti", "target": "clause:ccpa:1798.100", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS data lifecycle management \u2014 S3 Lifecycle and RDS retenti", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS data lifecycle management \u2014 S3 Lifecycle and RDS retenti", "target": "clause:iso_27701:7.4.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS data lifecycle management \u2014 S3 Lifecycle and RDS retenti", "target": "clause:microsoft_rai:Microsoft Purview Data Lifecycle Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS data lifecycle management \u2014 S3 Lifecycle and RDS retenti", "target": "clause:openai_privacy:OpenAI API data retention policy \u2014 30-day default", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS data lifecycle management \u2014 S3 Lifecycle and RDS retenti", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Data Processing Addendum (GDPR DPA)", "target": "clause:ccpa:1798.140", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Data Processing Addendum (GDPR DPA)", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Data Processing Addendum (GDPR DPA)", "target": "clause:iso_27701:8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Data Processing Addendum (GDPR DPA)", "target": "clause:microsoft_rai:Microsoft Product Terms and Data Processing Agreement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Data Processing Addendum (GDPR DPA)", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Data Processing Addendum (GDPR DPA)", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Data Processing Addendum (GDPR DPA)", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Data Processing Addendum (GDPR DPA)", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Data Processing Addendum (GDPR DPA)", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS data transfer resources \u2014 customer TIA support", "target": "clause:gdpr:46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS data transfer resources \u2014 customer TIA support", "target": "clause:microsoft_rai:Microsoft data transfer documentation \u2014 customer TIA support", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS data transfer resources \u2014 customer TIA support", "target": "clause:openai_privacy:OpenAI DPA and security documentation \u2014 customer transfer as", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS data transfer resources \u2014 customer TIA support", "target": "clause:uk_duaa:TIA equivalent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS GDPR compliance resources \u2014 customer DPIA support", "target": "clause:eu_ai_act:27", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS GDPR compliance resources \u2014 customer DPIA support", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS GDPR compliance resources \u2014 customer DPIA support", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS GDPR compliance resources \u2014 customer DPIA support", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Impact Assessment req", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS GDPR compliance whitepaper \u2014 data transfer mechanisms", "target": "clause:gdpr:46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS GDPR compliance whitepaper \u2014 data transfer mechanisms", "target": "clause:microsoft_rai:Microsoft EU Data Boundary Commitment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS GDPR compliance whitepaper \u2014 data transfer mechanisms", "target": "clause:nist_pf:ID.DE-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS GDPR compliance whitepaper \u2014 data transfer mechanisms", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional storage options", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS GDPR compliance whitepaper \u2014 data transfer mechanisms", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS GDPR compliance whitepaper \u2014 data transfer mechanisms", "target": "clause:uk_duaa:international transfer provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Glue DataBrew \u2014 PII masking and redaction transformation", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Glue DataBrew \u2014 PII masking and redaction transformation", "target": "clause:gdpr:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Glue DataBrew \u2014 PII masking and redaction transformation", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 pseudonymization an", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Glue DataBrew \u2014 PII masking and redaction transformation", "target": "clause:iso_27701:7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Glue DataBrew \u2014 PII masking and redaction transformation", "target": "clause:microsoft_rai:Microsoft Purview Information Protection \u2014 classification an", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Glue DataBrew \u2014 PII masking and redaction transformation", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 accredited certification \u2014 AI services", "target": "clause:gdpr:42", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 accredited certification \u2014 AI services", "target": "clause:iso_27701:PIMS certification (standard as a whole)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 accredited certification \u2014 AI services", "target": "clause:microsoft_rai:Azure AI compliance certifications \u2014 ISO 27001, SOC 2, ISO 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 accredited certification \u2014 AI services", "target": "clause:nist_pf:GV.MT-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 accredited certification \u2014 AI services", "target": "clause:openai_privacy:OpenAI compliance certifications \u2014 SOC 2, ISO 27001, ISO 420", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 certification \u2014 AI management system impac", "target": "clause:eu_ai_act:27", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 certification \u2014 AI management system impac", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 certification \u2014 AI management system impac", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 certification \u2014 AI management system impac", "target": "clause:microsoft_rai:Microsoft Responsible AI Impact Assessment template and guid", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 certification and SOC 2 \u2014 vendor assurance", "target": "clause:eu_ai_act:47", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 certification and SOC 2 \u2014 vendor assurance", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 certification and SOC 2 \u2014 vendor assurance", "target": "clause:iso_27701:5.8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 certification and SOC 2 \u2014 vendor assurance", "target": "clause:microsoft_rai:Azure AI certifications \u2014 ISO 27001, SOC 2, ISO 42001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS ISO/IEC 42001 certification and SOC 2 \u2014 vendor assurance", "target": "clause:openai_privacy:OpenAI certifications \u2014 SOC 2, ISO 27001, ISO 42001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS KMS and S3 server-side encryption \u2014 AES-256 at rest, TLS", "target": "clause:gdpr:32", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS KMS and S3 server-side encryption \u2014 AES-256 at rest, TLS", "target": "clause:google_saif:Core element \u2014 Expand strong security foundations to the AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS KMS and S3 server-side encryption \u2014 AES-256 at rest, TLS", "target": "clause:iso_27701:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS KMS and S3 server-side encryption \u2014 AES-256 at rest, TLS", "target": "clause:microsoft_rai:Azure encryption \u2014 at rest and in transit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS KMS and S3 server-side encryption \u2014 AES-256 at rest, TLS", "target": "clause:nist_pf:PR.DS-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS KMS and S3 server-side encryption \u2014 AES-256 at rest, TLS", "target": "clause:nist_pf:PR.DS-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS KMS and S3 server-side encryption \u2014 AES-256 at rest, TLS", "target": "clause:openai_privacy:OpenAI security practices \u2014 AES-256 at rest, TLS 1.2+ in tra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation \u00a7Column/Row-Level Security for Minimizati", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation \u00a7Column/Row-Level Security for Minimizati", "target": "clause:google_saif:User Data Management \u2014 mitigates Excessive Data Handling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation \u00a7Column/Row-Level Security for Minimizati", "target": "clause:iso_27701:7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation \u00a7Column/Row-Level Security for Minimizati", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation \u00a7Column/Row-Level Security for Minimizati", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation \u00a7Column/Row-Level Security for Minimizati", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation and Glue Data Catalog \u2014 centralized gover", "target": "clause:eu_data_gov_act:20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation and Glue Data Catalog \u2014 centralized gover", "target": "clause:gdpr:30", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation and Glue Data Catalog \u2014 centralized gover", "target": "clause:google_saif:Model and Data Inventory Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation and Glue Data Catalog \u2014 centralized gover", "target": "clause:iso_27701:7.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation and Glue Data Catalog \u2014 centralized gover", "target": "clause:microsoft_rai:Microsoft Purview Data Map \u2014 lineage tracking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation and Glue Data Catalog \u2014 centralized gover", "target": "clause:nist_pf:ID.IM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Data Catalog", "target": "clause:gdpr:30", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Data Catalog", "target": "clause:google_saif:Model and Data Inventory Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Data Catalog", "target": "clause:iso_27701:7.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Data Catalog", "target": "clause:lgpd:37", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Data Catalog", "target": "clause:microsoft_rai:Microsoft Purview Data Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Data Catalog", "target": "clause:nist_pf:ID.IM-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Data Catalog", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Data Catalog", "target": "clause:pipl:55", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Data Catalog", "target": "clause:quebec_law25:3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Fine-Grained Access Control", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Fine-Grained Access Control", "target": "clause:gdpr:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Fine-Grained Access Control", "target": "clause:google_saif:Training Data Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Fine-Grained Access Control", "target": "clause:iso_27701:7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Fine-Grained Access Control", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Fine-Grained Access Control", "target": "clause:nist_pf:ID.IM-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Lake Formation Fine-Grained Access Control", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "target": "clause:google_saif:Insecure Integrated Component risk", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "target": "clause:iso_27701:8.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "target": "clause:iso_27701:8.5.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "target": "clause:nist_pf:ID.DE-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "target": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Security Hub \u2014 findings aggregation and automated respon", "target": "clause:ccpa:1798.150", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Security Hub \u2014 findings aggregation and automated respon", "target": "clause:gdpr:33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Security Hub \u2014 findings aggregation and automated respon", "target": "clause:gdpr:34", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Security Hub \u2014 findings aggregation and automated respon", "target": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Security Hub \u2014 findings aggregation and automated respon", "target": "clause:microsoft_rai:Microsoft Products and Services DPA \u2014 security incident noti", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Security Incident Response Guide", "target": "clause:ccpa:1798.150", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Security Incident Response Guide", "target": "clause:gdpr:33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Security Incident Response Guide", "target": "clause:gdpr:34", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Security Incident Response Guide", "target": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Security Incident Response Guide", "target": "clause:iso_27701:6.13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Security Incident Response Guide", "target": "clause:microsoft_rai:Microsoft Products and Services DPA \u2014 security incident noti", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Shared Responsibility Model \u2014 customer obligations for c", "target": "clause:ccpa:1798.120", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Shared Responsibility Model \u2014 customer obligations for c", "target": "clause:gdpr:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Shared Responsibility Model \u2014 customer obligations for c", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Shared Responsibility Model \u2014 customer obligations for c", "target": "clause:uk_duaa:children provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Well-Architected Machine Learning Lens \u2014 security and pr", "target": "clause:gdpr:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Well-Architected Machine Learning Lens \u2014 security and pr", "target": "clause:google_saif:Secure-by-Default ML Tooling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Well-Architected Machine Learning Lens \u2014 security and pr", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_privacy:AWS Well-Architected Machine Learning Lens \u2014 security and pr", "target": "clause:nist_pf:GV.PO-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Framework \u2014 Well-Architected Review: st", "target": "clause:cobit_dss04:DSS04.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Framework \u2014 Well-Architected Review: st", "target": "clause:dora:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Framework \u2014 Well-Architected Review: st", "target": "clause:google_sre:Ch. 32", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Framework \u2014 Well-Architected Review: st", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Design lifecycle integration: BCDR", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Framework \u2014 Well-Architected Review: st", "target": "clause:nist_800_160_v2:\u00a72.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Framework \u2014 Well-Architected Review: st", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Failure management", "target": "clause:cis_controls_v8:Control 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Failure management", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Failure management", "target": "clause:google_sre:Google SRE \u2014 Postmortem practices and error budget policies:", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Failure management", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Failure management", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Geo-redundant storage design, Azur", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Failure management", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Failure management", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Resilience design", "target": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 DDoS protection and load balancing f", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Resilience design", "target": "clause:cobit_dss04:DSS04.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Resilience design", "target": "clause:dora:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Resilience design", "target": "clause:google_sre:Google SRE \u2014 Incident management, postmortem practices, and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Resilience design", "target": "clause:iso_22301:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Resilience design", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 design guidance for regulated work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Resilience design", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Testing reliabilit", "target": "clause:cobit_dss04:DSS04.08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Testing reliabilit", "target": "clause:dora:19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Testing reliabilit", "target": "clause:google_sre:Google SRE \u2014 Postmortem practices and production readiness r", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Testing reliabilit", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Testing reliabilit", "target": "clause:iso_27031:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Testing reliabilit", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 BCDR documentation, failover test", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Testing reliabilit", "target": "clause:nist_csf:ID.IM-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Testing reliabilit", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 recovery procedures", "target": "clause:cobit_dss04:DSS04.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 recovery procedures", "target": "clause:dora:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 recovery procedures", "target": "clause:google_sre:Incident management and postmortem practices", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 recovery procedures", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 recovery procedures", "target": "clause:microsoft_azure_resil:Failover configuration and recovery objectives", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 recovery procedures", "target": "clause:nist_csf:RC.RP", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 recovery procedures", "target": "clause:nist_sp800_34:\u00a74.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 RTO/RPO alignment", "target": "clause:cobit_dss04:DSS04.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 RTO/RPO alignment", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 RTO/RPO alignment", "target": "clause:google_sre:Ch. 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 RTO/RPO alignment", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 RTO/RPO alignment", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 BCDR design guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 RTO/RPO alignment", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Failure management \u2014 RTO/RPO alignment", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Foundations \u2014 organizational prerequisites for reliability", "target": "clause:cobit_dss04:DSS04.01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Foundations \u2014 organizational prerequisites for reliability", "target": "clause:dora:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Foundations \u2014 organizational prerequisites for reliability", "target": "clause:google_sre:Toil reduction and on-call practices", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Foundations \u2014 organizational prerequisites for reliability", "target": "clause:iso_22301:7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Foundations \u2014 organizational prerequisites for reliability", "target": "clause:nist_csf:GV.SC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Foundations \u2014 organizational prerequisites for reliability", "target": "clause:nist_sp800_34:\u00a72.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 1", "target": "clause:cloudflare_resilience:Load balancing and failover \u2013 Multi-origin failover for AI A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 1", "target": "clause:cobit_dss04:DSS04.03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 1", "target": "clause:dora:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 1", "target": "clause:google_sre:Production Readiness Review \u2013 Third-party dependency resilie", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 1", "target": "clause:iso_22301:8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 1", "target": "clause:microsoft_azure_resil:BCDR \u2013 Third-party service dependency continuity planning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 1", "target": "clause:nist_csf:GV.SC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 1", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Load balancing and failover, DDoS pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:cloudflare_resilience:Load balancing and failover \u2013 Geo-distributed AI inference e", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:cobit_dss04:DSS04.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:google_sre:Ch. 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:google_sre:Ch. 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:google_sre:Error budget policies \u2013 Multi-region SLO maintenance and fai", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:google_sre:Error budget policies \u2014 Service tier definition by SLO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:microsoft_azure_resil:Azure Resiliency \u2014 Availability zone design and geo-redundan", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:microsoft_azure_resil:RE:05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 Business continuity tiering by service", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:nist_800_160_v2:Appendix D", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:nist_csf:ID.AM-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:nist_csf:PR.IR-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 10", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical capability levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Rate limiting for API protection and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:cloudflare_resilience:Rate limiting for API protection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:dora:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:google_sre:Ch. 21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:google_sre:Ch. 22", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:microsoft_azure_resil:BCDR \u2013 Graceful degradation design and availability zone fai", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:microsoft_azure_resil:Bulkhead pattern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:nist_800_160_v2:\u00a72.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:nist_800_160_v2:\u00a72.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 11", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Edge resilience patterns: stateless", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:cobit_dss04:DSS04.03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:cobit_dss04:DSS04.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:dora:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:dora:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:dora:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:dora:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:google_sre:Ch. 22", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:google_sre:Ch. 26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:google_sre:Ch. 33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:google_sre:Google SRE \u2014 Production readiness review and change manageme", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:google_sre:Postmortem Culture \u2013 Blameless postmortems with tracked acti", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:google_sre:Production readiness review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:google_sre:Production Readiness Review \u2013 Reliability and resilience con", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:google_sre:Production readiness review: fault tolerance criteria", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:google_sre:SLO/SLA management and error budget policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:iso_22301:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:iso_22301:8.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:iso_22301:8.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:iso_22301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:iso_27031:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 infrastructure-as-code recovery (A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:microsoft_azure_resil:BCDR \u2013 Chaos testing and resilience validation (Azure Chaos", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:microsoft_azure_resil:BCDR \u2013 Post-incident review and recovery objective validatio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:microsoft_azure_resil:BCDR \u2013 Testing and validation of failover and recovery contr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:microsoft_azure_resil:BCDR documentation: fault tolerance evidence", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:microsoft_azure_resil:Durable Functions checkpoint", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:nist_800_160_v2:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:nist_csf:GV.OC-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:nist_csf:GV.OV-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:nist_csf:GV.OV-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:nist_csf:ID.IM-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:nist_csf:ID.IM-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:nist_sp800_34:\u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:nist_sp800_34:\u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:nist_sp800_34:\u00a74.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Capabilities and Safeguards Repor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 12", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a75.1 Internal governanc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health checks and origin valid", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:cobit_dss04:DSS04.01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:cobit_dss04:DSS04.04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:cobit_dss04:DSS04.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:cobit_dss04:DSS04.08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:dora:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:dora:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:dora:30", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:google_sre:Ch. 14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:google_sre:Disaster Recovery Testing (DiRT) and game days", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:google_sre:Incident management and Production Readiness Review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:google_sre:Postmortem practices \u2014 Structured incident report with timel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:google_sre:Postmortem practices and PRR \u2013 Resilience evidence from SRE", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:google_sre:Production readiness review \u2014 Availability requirements", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:google_sre:SLO management \u2014 Error budget consumption and SLA breach det", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:iso_22301:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:iso_22301:8.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:iso_22301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:iso_27031:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:iso_27031:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Business continuity planning methodol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Post-recovery documentation and compl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery objectives and failover conf", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Testing and validation program", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:microsoft_azure_resil:Business continuity planning \u2013 BCDR evidence documentation a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:microsoft_azure_resil:Failover configuration \u2014 Return-to-service validation and pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 RTO/RPO measurement and BCDR complianc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:nist_csf:GV.RR-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:nist_csf:ID.IM-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:nist_csf:ID.IM-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:nist_csf:ID.IM-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:nist_csf:RC.RP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 13", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based origin routing", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:cloudflare_resilience:Rate limiting and DDoS protection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:dora:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:dora:7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:google_sre:Cascading failure prevention", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:google_sre:Ch. 22", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:iso_22301:8.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Geo-redundancy and failover configura", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:microsoft_azure_resil:Circuit Breaker Pattern \u2014 Azure Architecture Center", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:nist_csf:PR.IR-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 5", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven availability changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 6", "target": "clause:cis_controls_v8:Control 8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 6", "target": "clause:cobit_dss04:DSS04.08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 6", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 6", "target": "clause:google_sre:Postmortem practices \u2014 Timestamped action log and incident t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 6", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 6", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery documentation and activity l", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 6", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based steering policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:dora:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:google_sre:Ch. 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:google_sre:Production Readiness Review \u2014 Failover procedures and incide", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:google_sre:Production Readiness Review \u2014 Rollback readiness criteria", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:iso_22301:8.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:microsoft_azure_resil:BCDR \u2014 Failover configuration and availability zone design", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Deployment rollback and blue-green re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:microsoft_azure_resil:Failover configuration \u2014 Blue/green deployment and deploymen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:nist_sp800_34:\u00a73.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard decisions affecting deployed mod", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 8", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:cis_controls_v8:CIS Control 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:cis_controls_v8:Control 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:cobit_dss04:DSS04.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:enisa_ai:Cybersecurity of AI and Standardisation (2023) \u2014 document-le", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:google_sre:Incident management \u2014 Verification of data consistency befor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:google_sre:Production Readiness Review \u2014 Data infrastructure recovery r", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:google_sre:SLO/Error Budget Policy \u2013 Defining and enforcing availabilit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:iso_22301:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:microsoft_azure_resil:BCDR \u2013 Recovery objectives (RTO/RPO) definition and validati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:microsoft_azure_resil:BCDR \u2014 Data backup, geo-redundant recovery, and RPO verifica", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:microsoft_azure_resil:RE:09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:nist_csf:RC.RP-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:REL 9", "target": "clause:nist_sp800_34:\u00a73.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Resilience design principles", "target": "clause:cobit_dss04:DSS04.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Resilience design principles", "target": "clause:dora:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Resilience design principles", "target": "clause:google_sre:Error budget policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Resilience design principles", "target": "clause:iso_22301:6.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Resilience design principles", "target": "clause:microsoft_azure_resil:BCDR design guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Resilience design principles", "target": "clause:nist_csf:GV.PO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:aws_reliability:Resilience design principles", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 10", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 10", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 10", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 10", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 10", "target": "clause:soc2:CC7.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 10", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 11", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 11", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 11", "target": "clause:google_financial:Model Cards", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 11", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 11", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 11", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 11", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 11", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 11", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 11", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 11", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 11", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:coso_icfr:Component 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:coso_icfr:Component 3 \u2014 Control Activities", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:coso_icfr:Principle 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:eu_ai_act:49", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:eu_ai_act:Annex III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:occ_ai:Model Risk Management booklet (2021)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:pcaob_as_2201:\u00b6.20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:sec_ai:Proposed rule, Release 34-97990 (withdrawn 2025-06-12)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:sox:\u00a7302(a)(4)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 2", "target": "clause:sr26_2:\u00a7VI (Model Inventory)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 3", "target": "clause:coso_icfr:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 3", "target": "clause:coso_icfr:Principles 10-11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 3", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 3", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 3", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 3", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 3", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 3", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 3", "target": "clause:pcaob_as_2201:\u00b6.39-.40", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 3", "target": "clause:soc2:CC6.1, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 3", "target": "clause:sox:\u00a7404(a)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 3", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 7", "target": "clause:coso_icfr:Component 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 7", "target": "clause:coso_icfr:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 7", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 7", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 7", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 7", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 7", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 7", "target": "clause:pcaob_as_2201:\u00b6.39", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 7", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 7", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:coso_icfr:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:omb_a_123:Section VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:sr26_2:\u00a7V (Outcomes Analysis)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 8", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:coso_icfr:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:omb_a_123:Section IV.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principle 9", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2 & 3", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2 & 3", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2 & 3", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2 & 3", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2 & 3", "target": "clause:soc2:PI1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2 & 3", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2-4", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2-4", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2-4", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2-4", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2-4", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2-4", "target": "clause:soc2:CC6.6, CC6.7, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2-4", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:bcbs_239:Principles 2-4", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:c2pa:Content Credentials (C2PA manifests)", "target": "clause:dama_dmbok:Ch. 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:c2pa:Content Credentials (C2PA manifests)", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:c2pa:Content Credentials (C2PA manifests)", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:c2pa:Content Credentials (C2PA manifests)", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.100", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.100", "target": "clause:iso_27701:7.4.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.100", "target": "clause:microsoft_rai:Microsoft Purview Data Lifecycle Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.100", "target": "clause:openai_privacy:OpenAI API data retention policy \u2014 30-day default", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.100", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.105", "target": "clause:gdpr:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.105", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 de-identification A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.105", "target": "clause:iso_27701:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.105", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 account deactivation and deletio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.105", "target": "clause:openai_privacy:OpenAI data deletion controls", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.110", "target": "clause:gdpr:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.110", "target": "clause:google_saif:Training Data Management \u2014 provenance and lineage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.110", "target": "clause:okta_iam:Okta scoped administrator roles \u2014 least-privilege data expor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.110", "target": "clause:openai_privacy:OpenAI privacy request fulfillment \u2014 personal data access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.110", "target": "clause:uk_duaa:access rights provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.120", "target": "clause:dpdp:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.120", "target": "clause:gdpr:21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.120", "target": "clause:gdpr:7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.120", "target": "clause:gdpr:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.120", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 account suspension states", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.120", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 automated deprovisioning workflo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.120", "target": "clause:openai_privacy:OpenAI enterprise data controls \u2014 business data not used for", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.120", "target": "clause:openai_privacy:OpenAI privacy request processing \u2014 data deletion", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.120", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.120", "target": "clause:uk_duaa:automated decision rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.120", "target": "clause:uk_duaa:children provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.121", "target": "clause:edpb_opinion_28_2024:3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.121", "target": "clause:gdpr:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.121", "target": "clause:google_saif:Google Cloud Sensitive Data Protection (Cloud DLP)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.121", "target": "clause:microsoft_rai:Microsoft Purview Information Protection Classification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.121", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.130", "target": "clause:gdpr:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.130", "target": "clause:gdpr:20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.130", "target": "clause:nist_pf:CT.DM-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.130", "target": "clause:nist_pf:PR.AC-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.130", "target": "clause:okta_iam:Okta Universal Directory \u2014 profile export APIs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.130", "target": "clause:okta_iam:Okta Universal Directory and authentication policies \u2014 ident", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.130", "target": "clause:openai_privacy:OpenAI API \u2014 customer data export", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:dpdp:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:dpdp:ch. III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:gdpr:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:gdpr:30", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:gdpr:7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:microsoft_rai:Microsoft EU Data Boundary and Jurisdiction-Specific DPAs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:okta_iam:Okta + DataGrail integration \u2014 automated DSR intake", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:okta_iam:Okta Universal Directory \u2014 custom profile attributes for con", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 customer content and train", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:openai_privacy:OpenAI privacy request channels (privacy.openai.com / dsar@o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.135", "target": "clause:uk_duaa:Data protection complaints procedure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:cnil_ai:How-to sheet 2 \u2014 Defining a purpose", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:dpdp:3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:gdpr:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:gdpr:3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:iso_27701:8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:microsoft_rai:Microsoft Product Terms and Data Processing Agreement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 regulatory assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:nist_pf:PR.AC-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:okta_iam:Okta Universal Directory and authentication policies \u2014 ident", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:openai_privacy:OpenAI trust and compliance documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.140", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.150", "target": "clause:gdpr:33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.150", "target": "clause:gdpr:34", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.150", "target": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.150", "target": "clause:iso_27701:6.13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.150", "target": "clause:microsoft_rai:Microsoft Products and Services DPA \u2014 security incident noti", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.150", "target": "clause:microsoft_rai:Microsoft Purview Insider Risk Management \u2014 risky data-handl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.150", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.150", "target": "clause:nist_pf:PR.DS-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.150", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.185", "target": "clause:eu_ai_act:86", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.185", "target": "clause:gdpr:22", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.185", "target": "clause:google_saif:Agent Observability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.185", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Transparency goals", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.185", "target": "clause:openai_privacy:OpenAI system cards \u2014 model behavior transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ccpa:1798.185", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cfpb_ai:Circular 2022-03 \u2014 adverse action for credit decisions based", "target": "clause:coso_icfr:Component 2 \u2014 Risk Assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cfpb_ai:Circular 2022-03 \u2014 adverse action for credit decisions based", "target": "clause:eu_ai_act:86", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cfpb_ai:Circular 2022-03 \u2014 adverse action for credit decisions based", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cfpb_ai:Circular 2022-03 \u2014 adverse action for credit decisions based", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cfpb_ai:Circular 2022-03 \u2014 adverse action for credit decisions based", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:CIS Control 11", "target": "clause:google_sre:Production Readiness Review \u2014 Data infrastructure recovery r", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:CIS Control 11", "target": "clause:iso_22301:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:CIS Control 11", "target": "clause:microsoft_azure_resil:RE:09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:CIS Control 11", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:CIS Control 11", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 11", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 11", "target": "clause:google_sre:Google SRE \u2014 Postmortem practices and error budget policies:", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 11", "target": "clause:google_sre:Incident management \u2014 Verification of data consistency befor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 11", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 11", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Geo-redundant storage design, Azur", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 11", "target": "clause:microsoft_azure_resil:BCDR \u2014 Data backup, geo-redundant recovery, and RPO verifica", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 11", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 11", "target": "clause:nist_csf:RC.RP-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 11", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 11", "target": "clause:nist_sp800_34:\u00a73.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 16", "target": "clause:dora:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 16", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 8.2", "target": "clause:cobit_dss04:DSS04.08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 8.2", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 8.2", "target": "clause:google_sre:Postmortem practices \u2014 Timestamped action log and incident t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 8.2", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 8.2", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery documentation and activity l", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cis_controls_v8:Control 8.2", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 2", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 2", "target": "clause:eu_ai_act:Annex III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 2", "target": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 2", "target": "clause:iso_31000:6.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 2", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 2", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 2", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 2", "target": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 2", "target": "clause:owasp_aivss:AIVSS-AARS", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 3", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 3", "target": "clause:google_saif:Incident Response Management (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 3", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 3", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 3", "target": "clause:mitre_atlas:ATLAS tactics and techniques (framework-wide)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 3", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 4", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 4", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 4", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 4", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 4", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_ai_guidance:Line of Effort 4", "target": "clause:openai_preparedness:Building trust (\u00a75) \u2014 framework iteration and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Governance (cross-cutting capability)", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Governance (cross-cutting capability)", "target": "clause:nist_800_63:SP 800-63-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Governance (cross-cutting capability)", "target": "clause:okta_iam:Okta Identity Governance \u2014 Governance Structure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Governance (cross-cutting capability)", "target": "clause:ping_identity:Ping Identity for AI \u2014 Governance Capabilities", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "target": "clause:nist_800_63:SP 800-63B-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "target": "clause:nist_zt:\u00a73.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "target": "clause:nist_zt:\u00a75.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "target": "clause:okta_iam:Okta \u2014 Multi Region Resilience", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "target": "clause:okta_iam:Okta Access Certifications \u2014 Service Account Reviews", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "target": "clause:okta_iam:Okta Privileged Access \u2014 Break Glass", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "target": "clause:okta_iam:Okta Privileged Access \u2014 Zero Standing Privilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "target": "clause:openid:RFC 9449", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "target": "clause:scim:RFC 7644 \u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:google_saif:Google Cloud IAM \u2014 HSM Service Account Keys", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:google_saif:Google Cloud Secret Manager \u2014 Credential Hygiene", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Short Lived Toke", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:google_saif:Google SAIF \u2014 Expand strong security foundations (least-priv", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73.1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:nist_zt:Tenet 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:okta_iam:Okta for AI Agents \u2014 Assurance Levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:okta_iam:Okta ISPM \u2014 Credential Exposure Scanning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "target": "clause:ping_identity:Ping Identity \u2014 Cross Organization Agent Auth", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:eidas2:19a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:google_saif:Google Cloud IAM \u2014 Dedicated Service Accounts", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:iso_24760:7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:iso_24760:7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:nist_800_63:SP 800-63-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:nist_800_63:SP 800-63A-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:oidc_federation:\u00a79", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:okta_iam:Okta for AI Agents \u2014 Agent Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:okta_iam:Okta ISPM \u2014 Unmanaged Agent Discovery", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 Deprovisioning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 Provisioning Gate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:okta_iam:Okta Universal Directory \u2014 Federation Trust Config", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:okta_iam:Okta Universal Directory \u2014 Human NHI Separation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:owasp_nhi10:NHI1:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:owasp_nhi10:NHI2:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:owasp_nhi10:NHI5:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent Gateway revocation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core provisioning gate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Trust Framework", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:scim:RFC 7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:scim:RFC 7644 \u00a73.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:scim:RFC7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:scim:RFC7644 \u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "target": "clause:spiffe_spire:SVID \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "target": "clause:google_saif:Google SAIF \u2014 Extend detection and response to AI (behaviora", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "target": "clause:google_saif:Google Security Command Center \u2014 privilege escalation detect", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "target": "clause:google_saif:Google Security Command Center \u2014 Threat Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "target": "clause:nist_zt:Tenet 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "target": "clause:okta_iam:Okta Adaptive MFA \u2014 Impossible Travel Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Anomalous Auth Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Machine Identity Baseline", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "target": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Admin Activity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "target": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "target": "clause:google_saif:Google Cloud Audit Logs \u2014 Organization Log Sink", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "target": "clause:nist_zt:Tenet 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "target": "clause:okta_iam:Okta Identity Governance \u2014 Program Metrics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "target": "clause:okta_iam:Okta System Log \u2014 Token Exchange Audit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "target": "clause:okta_iam:Okta Workflows \u2014 Identity Incident Response", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 DDoS protection and load balancing f", "target": "clause:cobit_dss04:DSS04.02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 DDoS protection and load balancing f", "target": "clause:dora:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 DDoS protection and load balancing f", "target": "clause:google_sre:Google SRE \u2014 Incident management, postmortem practices, and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 DDoS protection and load balancing f", "target": "clause:iso_22301:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 DDoS protection and load balancing f", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 design guidance for regulated work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 DDoS protection and load balancing f", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Edge resilience patterns: stateless", "target": "clause:google_sre:Ch. 26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Edge resilience patterns: stateless", "target": "clause:iso_22301:8.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Edge resilience patterns: stateless", "target": "clause:microsoft_azure_resil:Durable Functions checkpoint", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Edge resilience patterns: stateless", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Load balancing and failover, DDoS pr", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Load balancing and failover, DDoS pr", "target": "clause:google_sre:Ch. 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Load balancing and failover, DDoS pr", "target": "clause:google_sre:Ch. 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Load balancing and failover, DDoS pr", "target": "clause:microsoft_azure_resil:Azure Resiliency \u2014 Availability zone design and geo-redundan", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Load balancing and failover, DDoS pr", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Load balancing and failover, DDoS pr", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Rate limiting for API protection and", "target": "clause:dora:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Rate limiting for API protection and", "target": "clause:google_sre:Ch. 21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Rate limiting for API protection and", "target": "clause:microsoft_azure_resil:Bulkhead pattern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Rate limiting for API protection and", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2013 Geo-distributed AI inference e", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2013 Geo-distributed AI inference e", "target": "clause:google_sre:Error budget policies \u2013 Multi-region SLO maintenance and fai", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2013 Geo-distributed AI inference e", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2013 Geo-distributed AI inference e", "target": "clause:microsoft_azure_resil:RE:05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2013 Geo-distributed AI inference e", "target": "clause:nist_csf:PR.IR-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2013 Multi-origin failover for AI A", "target": "clause:cobit_dss04:DSS04.03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2013 Multi-origin failover for AI A", "target": "clause:dora:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2013 Multi-origin failover for AI A", "target": "clause:google_sre:Production Readiness Review \u2013 Third-party dependency resilie", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2013 Multi-origin failover for AI A", "target": "clause:iso_22301:8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2013 Multi-origin failover for AI A", "target": "clause:microsoft_azure_resil:BCDR \u2013 Third-party service dependency continuity planning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2013 Multi-origin failover for AI A", "target": "clause:nist_csf:GV.SC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2013 Multi-origin failover for AI A", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health checks and origin valid", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health checks and origin valid", "target": "clause:google_sre:Ch. 14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health checks and origin valid", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health checks and origin valid", "target": "clause:microsoft_azure_resil:Failover configuration \u2014 Return-to-service validation and pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health checks and origin valid", "target": "clause:nist_csf:RC.RP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based origin routing", "target": "clause:dora:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based origin routing", "target": "clause:google_sre:Cascading failure prevention", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based origin routing", "target": "clause:iso_22301:8.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based origin routing", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Geo-redundancy and failover configura", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based origin routing", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based origin routing", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven availability changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based steering policies", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based steering policies", "target": "clause:google_sre:Production Readiness Review \u2014 Failover procedures and incide", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based steering policies", "target": "clause:iso_22301:8.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based steering policies", "target": "clause:microsoft_azure_resil:BCDR \u2014 Failover configuration and availability zone design", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based steering policies", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based steering policies", "target": "clause:nist_sp800_34:\u00a73.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Rate limiting and DDoS protection", "target": "clause:dora:7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Rate limiting and DDoS protection", "target": "clause:google_sre:Ch. 22", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Rate limiting and DDoS protection", "target": "clause:nist_csf:PR.IR-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Rate limiting for API protection", "target": "clause:google_sre:Ch. 22", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Rate limiting for API protection", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Rate limiting for API protection", "target": "clause:microsoft_azure_resil:BCDR \u2013 Graceful degradation design and availability zone fai", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Rate limiting for API protection", "target": "clause:nist_800_160_v2:\u00a72.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cloudflare_resilience:Rate limiting for API protection", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cnil_ai:How-to sheet 2 \u2014 Defining a purpose", "target": "clause:dpdp:3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cnil_ai:How-to sheet 2 \u2014 Defining a purpose", "target": "clause:gdpr:3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cnil_ai:How-to sheet 2 \u2014 Defining a purpose", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cnil_ai:How-to sheet 2 \u2014 Defining a purpose", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 regulatory assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cnil_ai:How-to sheet 2 \u2014 Defining a purpose", "target": "clause:openai_privacy:OpenAI trust and compliance documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cnil_ai:How-to sheet 2 \u2014 Defining a purpose", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:ieee_7000:\u00a76.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:iso_23894:4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01", "target": "clause:coso_erm:Component 1 \u2014 Governance and Culture", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01", "target": "clause:gdpr:24", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01", "target": "clause:iso_37301:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01.06", "target": "clause:dama_dmbok:Ch. 12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01.06", "target": "clause:dama_dmbok:Ch. 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01.06", "target": "clause:data_contract_spec:Schema and Terms sections", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01.06", "target": "clause:databricks_unity:Unity Catalog", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01.06", "target": "clause:dcam:Capability 3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01.06", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01.06", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01.06", "target": "clause:iso_27701:7.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01.06", "target": "clause:microsoft_purview:Data Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01.06", "target": "clause:nist_pf:CT.DM-P4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO01.06", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO02.06", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO02.06", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO02.06", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO02.06", "target": "clause:microsoft_compliance:Improvement Actions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO02.06", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO02.06", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO02.06", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO02.06", "target": "clause:soc2:CC1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO04.04", "target": "clause:dama_dmbok:Ch. 12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO04.04", "target": "clause:databricks_unity:Unity Catalog", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO04.04", "target": "clause:dcam:Capability 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO04.04", "target": "clause:snowflake_horizon:Access History (object dependency lineage)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO07", "target": "clause:coso_erm:Component 1 \u2014 Attract and Retain Capable Individuals", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO07", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO07", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO07", "target": "clause:iso_37301:7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO07", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO07", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO07", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO07", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO09.04", "target": "clause:coso_erm:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO09.04", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO09.04", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO09.04", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO09.04", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO09.04", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO09.04", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO09.04", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO10.03", "target": "clause:eu_ai_act:23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO10.03", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO10.03", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO10.03", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO10.03", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO10.03", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO10.03", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO10.03", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.03", "target": "clause:coso_erm:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.03", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.03", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.03", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.03", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.03", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.04", "target": "clause:coso_erm:Principle 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.04", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.04", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.04", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.04", "target": "clause:nis2:21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:google_compliance:Compliance Reports Manager", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:iso_27001:A.5.33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:iso_37301:7.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:microsoft_compliance:Compliance Manager platform", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO11.05", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:coso_erm:Component 2 \u2014 Risk Appetite", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:coso_erm:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:coso_erm:Principle 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:dora:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:eu_ai_act:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:eu_ai_act:Annex III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:iso_37301:4.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:iso_37301:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:okta_governance:Access Certifications", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:soc2:CC2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.02", "target": "clause:soc2:CC3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.04", "target": "clause:coso_erm:Principle 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.04", "target": "clause:eu_ai_act:16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.04", "target": "clause:eu_ai_act:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.04", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.04", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.04", "target": "clause:openai_policies:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.06", "target": "clause:dama_dmbok:Ch. 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.06", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.06", "target": "clause:google_dataplex:Dataplex Auto Data Quality (scheduled/batch scans)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.06", "target": "clause:nist_pf:PR.DS-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO12.06", "target": "clause:owasp_ai_exchange:runtimemodeliointegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO14.01", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO14.01", "target": "clause:iso_27001:A.5.23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO14.01", "target": "clause:iso_37301:9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO14.01", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO14.01", "target": "clause:nist_csf:ID.AM-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO14.01", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO14.01", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:APO14.01", "target": "clause:soc2:CC6.1, CC7.1, CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI02.01", "target": "clause:coso_erm:Component 2: Objective Setting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI02.01", "target": "clause:csa_ai_caiq:GRC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI02.01", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI02.01", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI02.01", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI02.01", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI02.01", "target": "clause:iso_42001:4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI02.01", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI02.01", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.02", "target": "clause:coso_erm:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.02", "target": "clause:eu_ai_act:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.02", "target": "clause:gdpr:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.02", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.02", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.02", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.02", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.07", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.07", "target": "clause:eu_ai_act:Annex IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.07", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.07", "target": "clause:iso_27001:A.5.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.07", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.07", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.07", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.07", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.08", "target": "clause:dama_dmbok:Ch. 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.08", "target": "clause:databricks_unity:Lakehouse Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:BAI03.08", "target": "clause:dcam:Capability 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS01.03", "target": "clause:coso_erm:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS01.03", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS01.03", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS01.03", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS01.03", "target": "clause:nist_csf:DE.CM-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS02.02", "target": "clause:dama_dmbok:Ch. 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS02.02", "target": "clause:dcam:Capability 5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS02.02", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS02.02", "target": "clause:microsoft_purview:Data Health Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS02.07", "target": "clause:dama_dmbok:Ch. 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS02.07", "target": "clause:dcam:Capability 5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS02.07", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS02.07", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS04.07", "target": "clause:dama_dmbok:Ch. 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS04.07", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS04.07", "target": "clause:google_dataplex:Cloud Storage \u2014 Object Integrity and Retention Lock", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS04.07", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS05.04", "target": "clause:dama_dmbok:Ch. 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS05.04", "target": "clause:dcam:Component 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS05.04", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS05.04", "target": "clause:nist_pf:CT.PO-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS05.04", "target": "clause:owasp_ai_exchange:segregatedata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:dama_dmbok:Ch. 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:eu_data_gov_act:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:gdpr:32", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:gdpr:44", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:gdpr:Chapter V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:iso_27001:A.8.15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:iso_27701:6.9.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:iso_27701:7.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:microsoft_purview:Purview Insider Risk Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:mitre:AML.M0000", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:mitre:AML.M0001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:ms_ifc_agents:Confidentiality label read-access list ({Alice, Bob, Charlie", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:nist_csf:PR.DS-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:nist_pf:GV.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:nist_pf:PR.AC-P4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:owasp_ai_exchange:discrete", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.03", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.04", "target": "clause:dama_dmbok:Ch. 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.04", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.04", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.04", "target": "clause:nist_pf:PR.DS-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.04", "target": "clause:owasp_ai_exchange:runtimemodeliointegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:dama_dmbok:Ch. 12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:dama_dmbok:Ch. 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:dama_dmbok:Ch. 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:databricks_unity:Unity Catalog \u2014 Data Lineage and Auditing", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:dcam:Capability 5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:dcam:Component 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:eu_data_act:3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:iso_8000:8000-110", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:microsoft_purview:Data Catalog \u2014 Data Lineage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:microsoft_purview:Data lineage (lineage extraction)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:openlineage:RunEvent object (OpenLineage.json JSON Schema)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:DSS06.05", "target": "clause:snowflake_horizon:Data Quality Monitoring (data metric functions)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:EDM01", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:EDM01", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:EDM01", "target": "clause:iso_27001:4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:EDM01", "target": "clause:iso_37301:4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:EDM01", "target": "clause:microsoft_compliance:ISO 42001 assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01", "target": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01", "target": "clause:dama_dmbok:Ch. 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01", "target": "clause:dcam:Capability 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01", "target": "clause:openai_policies:Data residency commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01", "target": "clause:soc2:CC4.1 and CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:coso_erm:Principle 19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:dama_dmbok:Ch. 13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:databricks_unity:Databricks Lakehouse Monitoring \u2014 Metric Tables", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:dcam:Capability 5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:dcam:Component 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:eu_ai_act:Annex IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:iso_37301:9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:microsoft_compliance:Compliance score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:microsoft_purview:Purview Compliance Manager", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.04", "target": "clause:snowflake_horizon:Snowflake Data Metric Functions \u2014 History", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.05", "target": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.05", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.05", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.05", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.05", "target": "clause:iso_37301:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.05", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.05", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA01.05", "target": "clause:soc2:CC5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:coso_erm:Component 1 \u2014 Board Oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:coso_erm:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:dama_dmbok:Ch. 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:eu_ai_act:Annex IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:iso_37301:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:nist_pf:GV.MT-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.01", "target": "clause:coso_erm:Principle 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.01", "target": "clause:eu_ai_act:16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.01", "target": "clause:iso_37301:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.01", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.01", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.01", "target": "clause:soc2:CC1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.02", "target": "clause:coso_erm:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.02", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.02", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.02", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.02", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.02", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.02", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.02", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:coso_erm:Principle 15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:coso_erm:Principle 17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:dama_dmbok:Ch. 12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:dcam:Capability 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:eu_ai_act:20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:gdpr:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:microsoft_purview:Data Estate Insights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:nist_csf:RS.MI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA02.04", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:coso_erm:Component 5 \u2014 Reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:dama_dmbok:Ch. 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:gdpr:30", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:iso_27701:8.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:iso_37301:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:microsoft_purview:Purview Audit (unified audit log)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:coso_erm:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:iso_27001:A.5.31", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:iso_37301:6.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:nist_csf:GV.PO-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:soc2:A1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.01", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.02", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.02", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.02", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.02", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.02", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.02", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.02", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:coso_erm:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:coso_erm:Principle 20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:iso_37301:9.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:nist_csf:ID.RA-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.03", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:coso_erm:Principle 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:coso_erm:Principle 16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:coso_erm:Principle 20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:eu_ai_act:74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:gdpr:31", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:iso_27701:7.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:iso_37301:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:iso_37301:9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:nist_pf:GV.PO-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:okta_governance:Access Requests", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:soc2:CC2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA03.04", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA04", "target": "clause:dama_dmbok:Ch. 12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA04", "target": "clause:dama_dmbok:Ch. 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA04", "target": "clause:dcam:Capability 5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA04", "target": "clause:dcam:Capability 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA04", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA04", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA04", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA04", "target": "clause:iso_27701:7.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_2019:MEA04", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:dora:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:google_sre:Production readiness review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:google_sre:Production readiness review \u2014 Availability requirements", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:google_sre:Toil reduction and on-call practices", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:iso_22301:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:iso_22301:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:iso_22301:7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:iso_27031:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Business continuity planning methodol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:microsoft_azure_resil:Business continuity planning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:nist_csf:GV.RR", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:nist_csf:GV.RR-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:nist_csf:GV.SC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:nist_sp800_34:\u00a72.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 leadership risk ownership", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.01", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:dora:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:enisa_ai:Cybersecurity of AI and Standardisation (2023) \u2014 document-le", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:google_sre:Ch. 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:google_sre:Error budget policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:google_sre:Error budget policies \u2014 Service tier definition by SLO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:google_sre:Google SRE \u2014 Incident management, postmortem practices, and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:google_sre:SLO/Error Budget Policy \u2013 Defining and enforcing availabilit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:iso_22301:6.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:iso_22301:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 design guidance for regulated work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:microsoft_azure_resil:BCDR \u2013 Recovery objectives (RTO/RPO) definition and validati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:microsoft_azure_resil:BCDR design guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 BCDR design guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 Business continuity tiering by service", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:nist_800_160_v2:Appendix D", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:nist_csf:GV.PO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:nist_csf:ID.AM-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical capability levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.02", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.03", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.03", "target": "clause:dora:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.03", "target": "clause:google_sre:Google SRE \u2014 Production readiness review and change manageme", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.03", "target": "clause:google_sre:Production Readiness Review \u2013 Third-party dependency resilie", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.03", "target": "clause:iso_22301:8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.03", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 infrastructure-as-code recovery (A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.03", "target": "clause:microsoft_azure_resil:BCDR \u2013 Third-party service dependency continuity planning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.03", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.03", "target": "clause:nist_csf:GV.SC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.03", "target": "clause:nist_sp800_34:\u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.03", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:dora:19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:dora:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:dora:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:dora:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:google_sre:Ch. 32", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:google_sre:Disaster Recovery Testing (DiRT) and game days", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:google_sre:Incident management \u2014 Incident Commander role and structured", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:google_sre:Production Readiness Review \u2013 Reliability and resilience con", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:google_sre:Production readiness review: fault tolerance criteria", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:google_sre:SLO/SLA management and error budget policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:iso_22301:8.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:iso_22301:8.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Design lifecycle integration: BCDR", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:microsoft_azure_resil:BCDR \u2013 Testing and validation of failover and recovery contr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Testing and validation program", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:microsoft_azure_resil:BCDR documentation: fault tolerance evidence", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:microsoft_azure_resil:Business continuity planning \u2014 Communication procedures and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:nist_800_160_v2:\u00a72.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:nist_csf:GV.OC-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:nist_csf:GV.OV-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:nist_csf:ID.IM-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:nist_sp800_34:\u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:nist_sp800_34:\u00a74.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.04", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Capabilities and Safeguards Repor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05", "target": "clause:dora:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05", "target": "clause:dora:30", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05", "target": "clause:google_sre:Incident management and postmortem practices", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05", "target": "clause:google_sre:Postmortem practices and PRR \u2013 Resilience evidence from SRE", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05", "target": "clause:microsoft_azure_resil:Business continuity planning \u2013 BCDR evidence documentation a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05", "target": "clause:microsoft_azure_resil:Failover configuration and recovery objectives", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05", "target": "clause:nist_csf:GV.RR-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05", "target": "clause:nist_csf:RC.RP", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05", "target": "clause:nist_sp800_34:\u00a74.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05 \u2014 Review, Maintain, and Improve Continuity Plans", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05 \u2014 Review, Maintain, and Improve Continuity Plans", "target": "clause:google_sre:Ch. 22", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05 \u2014 Review, Maintain, and Improve Continuity Plans", "target": "clause:iso_22301:8.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.05 \u2014 Review, Maintain, and Improve Continuity Plans", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.06", "target": "clause:dora:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.06", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.06", "target": "clause:iso_27031:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.06", "target": "clause:nist_csf:RC.RP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.06", "target": "clause:nist_sp800_34:\u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:dora:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:dora:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:dora:19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:google_sre:Google SRE \u2014 Postmortem practices and production readiness r", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:google_sre:Postmortem practices \u2014 Structured incident report with timel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:google_sre:Postmortem practices \u2014 Timestamped action log and incident t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:google_sre:SLO management \u2014 Error budget consumption and SLA breach det", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:iso_22301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:iso_27031:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 BCDR documentation, failover test", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Post-recovery documentation and compl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery documentation and activity l", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 RTO/RPO measurement and BCDR complianc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:nist_csf:ID.IM-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:nist_csf:ID.IM-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:cobit_dss04:DSS04.08", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Attract and Retain Capable Individuals", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Attract and Retain Capable Individuals", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Attract and Retain Capable Individuals", "target": "clause:iso_37301:7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Attract and Retain Capable Individuals", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Attract and Retain Capable Individuals", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Attract and Retain Capable Individuals", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Attract and Retain Capable Individuals", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Board Oversight", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Board Oversight", "target": "clause:iso_37301:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Board Oversight", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Board Oversight", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Board Oversight", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Board Oversight", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Governance and Culture", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Governance and Culture", "target": "clause:gdpr:24", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Governance and Culture", "target": "clause:iso_37301:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Governance and Culture", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Governance and Culture", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 1 \u2014 Governance and Culture", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Risk Appetite", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Risk Appetite", "target": "clause:iso_37301:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Risk Appetite", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Risk Appetite", "target": "clause:okta_governance:Access Certifications", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Risk Appetite", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Risk Appetite", "target": "clause:soc2:CC3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "target": "clause:gdpr:24", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2: Objective Setting", "target": "clause:csa_ai_caiq:GRC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2: Objective Setting", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2: Objective Setting", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2: Objective Setting", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2: Objective Setting", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2: Objective Setting", "target": "clause:iso_42001:4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2: Objective Setting", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 2: Objective Setting", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 4 \u2014 Review and Revision", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 4 \u2014 Review and Revision", "target": "clause:gdpr:33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 4 \u2014 Review and Revision", "target": "clause:gdpr:34", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 4 \u2014 Review and Revision", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 4 \u2014 Review and Revision", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 4 \u2014 Review and Revision", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 4 \u2014 Review and Revision", "target": "clause:nist_csf:RS.AN", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 4 \u2014 Review and Revision", "target": "clause:nist_csf:RS.CO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 4 \u2014 Review and Revision", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 4 \u2014 Review and Revision", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "target": "clause:iso_37301:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "target": "clause:openai_policies:Data residency commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "target": "clause:soc2:CC4.1 and CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "target": "clause:soc2:CC5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Reporting", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Reporting", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Reporting", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Reporting", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Reporting", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Reporting", "target": "clause:iso_37301:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Reporting", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Reporting", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Reporting", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Component 5 \u2014 Reporting", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "target": "clause:eu_ai_act:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "target": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Non-Repudiable Principal Binding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Principal Accountability for AI Ac", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "target": "clause:microsoft_rai:Microsoft RAI Transparency Report \u2014 Board Governance Disclos", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "target": "clause:okta_authz:Okta Identity Tokens \u2014 Principal Identity Binding for AI Age", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "target": "clause:soc2:CC2.3 \u2014 Communicates with external parties", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:eu_ai_act:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:eu_ai_act:74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:gdpr:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:gdpr:31", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:iso_27001:A.5.31", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:nist_csf:ID.RA-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:soc2:A1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:soc2:CC2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10 \u2014 Identifies Risk", "target": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies \u2014 Constraint", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10 \u2014 Identifies Risk", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10 \u2014 Identifies Risk", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 10 \u2014 Identifies Risk", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11", "target": "clause:dora:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11", "target": "clause:eu_ai_act:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11", "target": "clause:eu_ai_act:Annex III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11", "target": "clause:iso_37301:4.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Resource Constraint Enfor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Policy Violation Tria", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:iso_37301:8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:iso_42001:6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Model Deployment Restriction and Content S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:microsoft_rai:Microsoft Sentinel \u2014 AI Policy Incident Classification and S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Tracked Categories and Deploymen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13", "target": "clause:nis2:21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Continuous Regulatory Contract Co", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "target": "clause:google_org_policy:Google Cloud Asset Inventory + Organization Policy \u2014 Ongoing", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "target": "clause:google_org_policy:Google Cloud Organization Policy Monitoring \u2014 Authority Boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "target": "clause:microsoft_rai:Microsoft Defender for Cloud \u2014 AI Workload Posture and Threa", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Custom Assessments fo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Regulatory Template C", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "target": "clause:nist_800_53:AU-6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "target": "clause:nist_rmf:MEASURE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "target": "clause:okta_authz:Okta System Log + Identity Governance Reports \u2014 Authority Li", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements Risk Responses", "target": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Immutable Approval Event Records", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements Risk Responses", "target": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements Risk Responses", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Unified AI Authorization Audit Tra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements Risk Responses", "target": "clause:nist_800_53:AU-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements Risk Responses", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Authorization Decision Reco", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 13 \u2014 Implements Risk Responses", "target": "clause:soc2:CC7.2 \u2014 The entity monitors system components for anomalies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15", "target": "clause:iso_37301:9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15", "target": "clause:microsoft_compliance:Improvement actions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15", "target": "clause:nist_800_53:CA-2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "target": "clause:google_org_policy:Google Cloud Marketplace + Org Policy \u2014 Approved AI Service", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "target": "clause:openai_preparedness:OpenAI Usage Policies \u2014 Permitted Use and Representation Gov", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15 \u2014 Assesses Substantial Change", "target": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Multi-Level Approva", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15 \u2014 Assesses Substantial Change", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15 \u2014 Assesses Substantial Change", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15 \u2014 Assesses Substantial Change", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15 \u2014 Assesses Substantial Change", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 15 \u2014 Assesses Substantial Change", "target": "clause:okta_authz:Okta Workflows \u2014 Automated Escalation Gate Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:eu_ai_act:72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:nist_csf:DE.CM-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 16", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 17", "target": "clause:eu_ai_act:20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 17", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 17", "target": "clause:gdpr:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 17", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 17", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 17", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 17", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 17 \u2014 Pursues Improvement in Enterprise Risk Manage", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 17 \u2014 Pursues Improvement in Enterprise Risk Manage", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Policy Simulation for Con", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 17 \u2014 Pursues Improvement in Enterprise Risk Manage", "target": "clause:iso_42001:6.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 17 \u2014 Pursues Improvement in Enterprise Risk Manage", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 17 \u2014 Pursues Improvement in Enterprise Risk Manage", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "target": "clause:google_org_policy:Google Cloud Custom Org Policy \u2014 Governance Program Coverage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "target": "clause:google_org_policy:Google Cloud Organization Policy + Cloud Asset Inventory \u2014 G", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "target": "clause:microsoft_rai:Microsoft Purview + Azure Policy Compliance Reports \u2014 AI Gov", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "target": "clause:microsoft_rai:Microsoft RAI Red Team Operations \u2014 Independent Program Asse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (oversight, acc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 19", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 19", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 19", "target": "clause:iso_37301:9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 19", "target": "clause:microsoft_compliance:Compliance score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 2", "target": "clause:eu_ai_act:16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 2", "target": "clause:iso_37301:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 2", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 2", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 2", "target": "clause:soc2:CC1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 2 \u2014 Establishes Operating Structures", "target": "clause:google_org_policy:Google Cloud IAM Resource Hierarchy \u2014 Inherited Authority Li", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 2 \u2014 Establishes Operating Structures", "target": "clause:iso_37301:\u00a7 7.2 \u2014 Competence", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 2 \u2014 Establishes Operating Structures", "target": "clause:iso_42001:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 2 \u2014 Establishes Operating Structures", "target": "clause:microsoft_rai:Azure RBAC \u2014 Authority Delegation Hierarchy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 2 \u2014 Establishes Operating Structures", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 2 \u2014 Establishes Operating Structures", "target": "clause:okta_authz:Okta Authorization Server \u2014 OAuth 2.0 Delegation Constraints", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20", "target": "clause:iso_37301:9.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20", "target": "clause:iso_37301:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20 \u2014 Reports on risk, culture, and performance", "target": "clause:google_org_policy:Google Cloud IAM Recommender \u2014 Least-Privilege Policy Improv", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20 \u2014 Reports on risk, culture, and performance", "target": "clause:iso_37301:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20 \u2014 Reports on risk, culture, and performance", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20 \u2014 Reports on risk, culture, and performance", "target": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report \u2014 Systematic Le", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 20 \u2014 Reports on risk, culture, and performance", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 5", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 5", "target": "clause:gdpr:39", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 5", "target": "clause:iso_37301:7.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 5", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 5", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 6", "target": "clause:eu_ai_act:16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 6", "target": "clause:eu_ai_act:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 6", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 6", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 6", "target": "clause:openai_policies:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines risk appetite", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines risk appetite", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Resource Provisioning Commitment Approval", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines risk appetite", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines risk appetite", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines risk appetite", "target": "clause:okta_authz:Okta Authorization Server \u2014 Commitment-Scoped Token Restrict", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "target": "clause:google_org_policy:Google Cloud PAM Multi-Level Approval \u2014 Dual-Authorization W", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "target": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Approval-Gated Elev", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "target": "clause:microsoft_rai:Azure DevOps Required Reviewers \u2014 Multi-Party AI Deployment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "target": "clause:microsoft_rai:Azure Policy Custom Definitions \u2014 AI Action Approval Thresho", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "target": "clause:okta_authz:Okta Authorization Server \u2014 Time-Bounded Approval-Scoped Tok", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "target": "clause:okta_authz:Okta Workflows \u2014 Multi-Party Token Approval Chains", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 9 \u2014 Formulates business objectives", "target": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies + Policy Sim", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 9 \u2014 Formulates business objectives", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 9 \u2014 Formulates business objectives", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 9 \u2014 Formulates business objectives", "target": "clause:microsoft_rai:Azure Policy Compliance Dashboard \u2014 AI Workload Policy Adher", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 9 \u2014 Formulates business objectives", "target": "clause:nist_rmf:MEASURE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_erm:Principle 9 \u2014 Formulates business objectives", "target": "clause:okta_authz:Okta System Log \u2014 Authorization Policy Adherence Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 1", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 1", "target": "clause:ffiec:IT Handbook \u2014 Development, Acquisition, and Maintenance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 1", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 1", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 1", "target": "clause:omb_a_123:Section II.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 1", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 1", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 1 \u2014 Control Environment", "target": "clause:eu_ai_act:50", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 1 \u2014 Control Environment", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 1 \u2014 Control Environment", "target": "clause:soc2:P1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:eu_ai_act:49", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:google_financial:Model Cards", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:occ_ai:Model Risk Management booklet (2021)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:omb_a_123:Section II.B", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:pcaob_as_2201:\u00b6.39", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2", "target": "clause:sr26_2:\u00a7VI (Model Inventory)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2 \u2014 Risk Assessment", "target": "clause:eu_ai_act:86", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2 \u2014 Risk Assessment", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2 \u2014 Risk Assessment", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 2 \u2014 Risk Assessment", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 3 \u2014 Control Activities", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 3 \u2014 Control Activities", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 3 \u2014 Control Activities", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 3 \u2014 Control Activities", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 3 \u2014 Control Activities", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 3 \u2014 Control Activities", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:eu_ai_act:53", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:google_financial:Model Cards", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:soc2:CC2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 10", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 10", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 10", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 10", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 11", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 11", "target": "clause:google_financial:Cloud IAM", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 11", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 11", "target": "clause:okta_financial:Okta access management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 11", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 11", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 12", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 12", "target": "clause:eu_ai_act:43", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 12", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 12", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 12", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 12", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 12", "target": "clause:okta_financial:Okta Privileged Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 12", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 12", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 12", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 12", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 12", "target": "clause:sr26_2:\u00a7V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 12", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 14", "target": "clause:eu_ai_act:14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 14", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 14", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 14", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 14", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 14", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 14", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:omb_a_123:Section VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:pcaob_as_2201:\u00b6.68-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 16", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:eu_ai_act:Annex IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:google_financial:Model Cards", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:omb_a_123:Section IV.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:omb_a_123:Section VI.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:pcaob_as_2201:\u00b6.39-.42", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:pcaob_as_2201:\u00b6.62-.70", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:pcaob_as_2201:\u00b6.72-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:soc2:CC2.2 & CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:sr26_2:\u00a7V + \u00a7VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 17", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 2", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 2", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 2", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 2", "target": "clause:omb_a_123:Section III.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 2", "target": "clause:sox:\u00a7301", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 2", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 2 \u2014 Control Environment", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 2 \u2014 Control Environment", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 2 \u2014 Control Environment", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 2 \u2014 Control Environment", "target": "clause:omb_a_123:Section II.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 2 \u2014 Control Environment", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 2 \u2014 Control Environment", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 2 \u2014 Control Environment", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 3", "target": "clause:eu_ai_act:16", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 3", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 3", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 3", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 3", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 3", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 3", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 3", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 3", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 3", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 3", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 3", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 6", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 6", "target": "clause:eu_ai_act:Annex III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 6", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 6", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 6", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 6", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 6", "target": "clause:omb_a_123:Section II.B", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 6", "target": "clause:pcaob_as_2201:\u00b6.20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 6", "target": "clause:sec_ai:Proposed rule, Release 34-97990 (withdrawn 2025-06-12)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 6", "target": "clause:sox:\u00a7302(a)(4)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 6", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principle 6", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-11", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-11", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-11", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-11", "target": "clause:pcaob_as_2201:\u00b6.39-.40", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-11", "target": "clause:soc2:CC6.1, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-11", "target": "clause:sox:\u00a7404(a)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-12", "target": "clause:finra:Regulatory Notice 24-09 (GenAI and LLMs)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-12", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-12", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-12", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-12", "target": "clause:omb_a_123:Section III.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-12", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-12", "target": "clause:pcaob_as_2201:\u00b6.14-.18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-12", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 10-12", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 16-17", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 16-17", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 16-17", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 16-17", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 16-17", "target": "clause:soc2:CC7.4, CC7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 16-17", "target": "clause:sox:\u00a7302(a)(5)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:coso_icfr:Principles 16-17", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_ai_caiq:GRC-07", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_ai_caiq:GRC-07", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_ai_caiq:GRC-07", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_ai_caiq:GRC-07", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_ai_caiq:GRC-07", "target": "clause:iso_42001:4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_ai_caiq:GRC-07", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_ai_caiq:GRC-07", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:csa_aismm:APP-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:csa_aismm:APP-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:csa_aismm:DEV-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:csa_aismm:DEV-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:imda_mgf:2.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:owasp_aisvs:C11.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-05", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:csa_aismm:APP-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:csa_aismm:APP-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:csa_aismm:APP-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:csa_aismm:MON-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:csa_aismm:MON-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:mitre_atlas:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_aisvs:C10.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_aisvs:C9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-09", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:csa_aismm:APP-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:csa_aismm:APP-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_aisvs:C10.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_aisvs:C7.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_aisvs:C7.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_aisvs:C9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-10", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:csa_aismm:APP-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:csa_aismm:APP-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:csa_aismm:APP-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:csa_aismm:DEV-03.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:csa_aismm:IAM-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:iso_42001:A.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:mitre_atlas:AML.M0032", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:mitre_atlas:AML.T0081", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:mitre_atlas:AML.T0105", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_aisvs:C10.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_aisvs:C4.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_aisvs:C4.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_aisvs:C9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_aisvs:C9.5.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-11", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-13", "target": "clause:csa_aismm:APP-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-13", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-13", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-13", "target": "clause:iso_42001:A.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-13", "target": "clause:mitre_atlas:AML.M0032", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-13", "target": "clause:mitre_atlas:AML.T0105", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-13", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-13", "target": "clause:owasp_aisvs:C4.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-13", "target": "clause:owasp_aisvs:C4.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-13", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-13", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-15", "target": "clause:csa_aismm:APP-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-15", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-15", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-15", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-15", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-15", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-15", "target": "clause:owasp_aisvs:C7.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-15", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-15", "target": "clause:owasp_aisvs:C7.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-15", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:AIS-15", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:csa_aismm:APP-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:csa_aismm:APP-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:csa_aismm:DEV-03.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:mitre_atlas:AML.T0081", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:owasp_aisvs:C10.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-01", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:csa_aismm:DEV-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:csa_aismm:DEV-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:imda_mgf:2.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-02", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-03", "target": "clause:csa_aismm:APP-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-03", "target": "clause:csa_aismm:IAM-05.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-03", "target": "clause:csa_aismm:ORG-05.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-03", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-03", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-03", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-03", "target": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-03", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-03", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-03", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-03", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-03", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-03", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-04", "target": "clause:csa_aismm:DEV-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-04", "target": "clause:csa_aismm:MOD-05.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-04", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-04", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-04", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-04", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-04", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-04", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-04", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-04", "target": "clause:owasp_aisvs:C11.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-04", "target": "clause:owasp_aisvs:C3.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-06", "target": "clause:csa_aismm:IAM-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-06", "target": "clause:csa_aismm:ORG-02.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-06", "target": "clause:csa_aismm:ORG-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-06", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-06", "target": "clause:iso_42001:A.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-06", "target": "clause:nist_rmf:AI RMF: Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-06", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-06", "target": "clause:owasp_aisvs:C3.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:CCC-06", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:csa_aismm:APP-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:csa_aismm:DAT-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:mitre_atlas:AML.M0005", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:mitre_atlas:AML.M0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:mitre_atlas:AML.T0056", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:owasp_aisvs:C8.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-10", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:csa_aismm:APP-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:csa_aismm:DAT-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:csa_aismm:DAT-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:csa_aismm:MON-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:mitre_atlas:AML.M0005", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:mitre_atlas:AML.M0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:mitre_atlas:AML.T0056", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:mitre_atlas:AML.T0057", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_aisvs:C8.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_aisvs:C8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_aisvs:C8.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_aisvs:C8.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_aisvs:C9.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-17", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:csa_aismm:DAT-02.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:csa_aismm:DAT-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:csa_aismm:DAT-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:mitre_atlas:AML.T0066", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:mitre_atlas:AML.T0100", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-20", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:csa_aismm:DAT-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:owasp_aisvs:C8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:owasp_aisvs:C8.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:owasp_aisvs:C8.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:owasp_aisvs:C9.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-21", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:csa_aismm:DAT-02.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:csa_aismm:DAT-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:csa_aismm:DAT-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:mitre_atlas:AML.T0066", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:mitre_atlas:AML.T0100", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:DSP-23", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:csa_aismm:APP-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:csa_aismm:IAM-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:csa_aismm:IR-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:iso_42001:A.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:mitre:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:nist_rmf:AI RMF: Govern, Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_aisvs:C11.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_aisvs:C9.2.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_aisvs:C9.5.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "target": "clause:csa_aismm:APP-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "target": "clause:iso_42001:A.8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "target": "clause:nist_rmf:AI RMF: Govern, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "target": "clause:owasp_aisvs:C7.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "target": "clause:owasp_aisvs:C7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (operational / cost risk)", "target": "clause:csa_aismm:APP-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (operational / cost risk)", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (operational / cost risk)", "target": "clause:iso_42001:A.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (operational / cost risk)", "target": "clause:mitre_atlas:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (operational / cost risk)", "target": "clause:mitre_atlas:AML.T0034.002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (operational / cost risk)", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (operational / cost risk)", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (operational / cost risk)", "target": "clause:owasp_aisvs:C12.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (operational / cost risk)", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (operational / cost risk)", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC (operational / cost risk)", "target": "clause:owasp_llm10:LLM10:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:csa_aismm:APP-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:csa_aismm:GOV-03.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:csa_aismm:GOV-05.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:csa_aismm:IAM-05.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:csa_aismm:ORG-05.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:csa_aismm:RSK-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-01", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-02", "target": "clause:csa_aismm:GOV-03.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-02", "target": "clause:csa_aismm:GOV-05.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-02", "target": "clause:csa_aismm:RSK-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-02", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-02", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-02", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-02", "target": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-02", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-02", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-06", "target": "clause:csa_aismm:GOV-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-06", "target": "clause:csa_aismm:IAM-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-06", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-06", "target": "clause:iso_42001:A.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-06", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:GRC-06", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-03", "target": "clause:csa_aismm:INF-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-03", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-03", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-03", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-03", "target": "clause:mitre_atlas:AML.T0025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-03", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-03", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-03", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-03", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-03", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-06", "target": "clause:csa_aismm:INF-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-06", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-06", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-06", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-06", "target": "clause:mitre_atlas:AML.T0025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-06", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-06", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-06", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-06", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:I&S-06", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:csa_aismm:IAM-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:csa_aismm:IAM-03.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:csa_aismm:IAM-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:csa_aismm:ORG-02.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:csa_aismm:ORG-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:iso_42001:A.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:nist_rmf:AI RMF: Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:owasp_aisvs:C3.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-03", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:csa_aismm:APP-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:csa_aismm:APP-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-05", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:csa_aismm:IAM-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:csa_aismm:IAM-05.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:mitre_atlas:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:mitre_atlas:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:owasp_aisvs:C5.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:owasp_aisvs:C9.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-08", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:csa_aismm:IAM-05.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-10", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:csa_aismm:GOV-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:csa_aismm:IAM-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:csa_aismm:IAM-03.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:csa_aismm:IAM-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:csa_aismm:IAM-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:iso_42001:A.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:owasp_aisvs:C9.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-12", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:csa_aismm:IAM-05.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-14", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:csa_aismm:APP-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:csa_aismm:APP-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:csa_aismm:IAM-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:csa_aismm:IAM-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:csa_aismm:IAM-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:csa_aismm:IAM-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:csa_aismm:IAM-05.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre_atlas:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre_atlas:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre_atlas:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre_atlas:AML.T0101", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C5.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C9.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_aisvs:C9.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-15", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:csa_aismm:APP-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:csa_aismm:IAM-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:csa_aismm:IAM-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:IAM-18", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:csa_aismm:INF-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:csa_aismm:MON-02.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:csa_aismm:MON-03.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:csa_aismm:MON-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:csa_aismm:MON-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:mitre_atlas:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:owasp_aisvs:C12.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:owasp_aisvs:C12.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-03", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:csa_aismm:IR-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:csa_aismm:MON-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:csa_aismm:MON-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:imda_mgf:1.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:imda_mgf:2.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-05", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:csa_aismm:IR-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:csa_aismm:MON-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:eu_ai_act:19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:iso_42001:A.6.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-07", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:csa_aismm:IAM-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:csa_aismm:INF-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:csa_aismm:IR-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:csa_aismm:MON-02.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:csa_aismm:MON-03.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:csa_aismm:MON-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:eu_ai_act:19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:iso_42001:A.6.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:owasp_aisvs:C12.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:owasp_aisvs:C12.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:owasp_aisvs:C9.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-09", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:csa_aismm:DAT-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:csa_aismm:MON-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:mitre_atlas:AML.T0057", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:LOG-16", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-06", "target": "clause:csa_aismm:MOD-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-06", "target": "clause:csa_aismm:RSK-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-06", "target": "clause:iso_42001:A.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-06", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-06", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-06", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:csa_aismm:DEV-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:csa_aismm:MOD-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:owasp_aisvs:C3.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:owasp_aisvs:C6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:owasp_aisvs:C6.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-08", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:csa_aismm:DEV-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:csa_aismm:MOD-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:owasp_aisvs:C3.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:owasp_aisvs:C6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:owasp_aisvs:C6.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-09", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-12", "target": "clause:csa_aismm:MOD-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-12", "target": "clause:csa_aismm:RSK-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-12", "target": "clause:iso_42001:A.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-12", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-12", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:MDS-12", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-06", "target": "clause:csa_aismm:IR-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-06", "target": "clause:csa_aismm:IR-05.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-06", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-06", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-06", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-06", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-06", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-06", "target": "clause:owasp_aisvs:C12.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-06", "target": "clause:owasp_aisvs:C9.3.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-06", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-06", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-09", "target": "clause:csa_aismm:IR-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-09", "target": "clause:csa_aismm:IR-05.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-09", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-09", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-09", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-09", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-09", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-09", "target": "clause:owasp_aisvs:C12.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-09", "target": "clause:owasp_aisvs:C9.3.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-09", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:SEF-09", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:csa_aismm:DEV-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:csa_aismm:DEV-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:csa_aismm:DEV-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:mitre_atlas:AML.M0013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:mitre_atlas:AML.T0099", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-08", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:csa_aismm:APP-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:csa_aismm:APP-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:csa_aismm:APP-04.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:csa_aismm:DEV-02.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:csa_aismm:DEV-03.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:csa_aismm:DEV-03.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:csa_aismm:DEV-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:csa_aismm:DEV-04.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:imda_mgf:2.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:mitre_atlas:AML.M0013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:mitre_atlas:AML.T0099", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:STA-09", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM (Threat & Vulnerability Management \u2014 Security Testing)", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM (Threat & Vulnerability Management \u2014 Security Testing)", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM (Threat & Vulnerability Management \u2014 Security Testing)", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM-05", "target": "clause:csa_aismm:IR-04.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM-05", "target": "clause:csa_aismm:MON-05.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM-05", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM-05", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM-05", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM-05", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM-05", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM-05", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM-05", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM-05", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM-05", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM-05", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aicm:TVM-05", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:mitre_atlas:AML.M0005", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:mitre_atlas:AML.M0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:mitre_atlas:AML.T0056", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_aisvs:C10.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_aisvs:C2.1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_aisvs:C7.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_aisvs:C7.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_aisvs:C8.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_aisvs:C9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-02.2", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:mitre_atlas:AML.T0081", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C10.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_aisvs:C9.5.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.2", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:iso_42001:A.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:mitre_atlas:AML.M0032", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:mitre_atlas:AML.T0081", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:mitre_atlas:AML.T0105", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:owasp_aisvs:C10.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:owasp_aisvs:C4.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:owasp_aisvs:C4.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-03.3", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:iso_42001:A.8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:nist_rmf:AI RMF: Govern, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_aisvs:C7.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_aisvs:C7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.1", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:iso_42001:A.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre_atlas:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre_atlas:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre_atlas:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre_atlas:AML.T0034.002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre_atlas:AML.T0101", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C11.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C12.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.2", "target": "clause:owasp_llm10:LLM10:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:imda_mgf:2.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:owasp_aisvs:C11.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-04.3", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-05.2", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-05.2", "target": "clause:imda_mgf:2.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-05.2", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-05.2", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-05.2", "target": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-05.2", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-05.2", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-05.2", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-05.2", "target": "clause:owasp_aisvs:C11.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:APP-05.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:mitre_atlas:AML.T0066", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:mitre_atlas:AML.T0100", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-02.1", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:mitre_atlas:AML.M0005", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:mitre_atlas:AML.M0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:mitre_atlas:AML.T0056", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:mitre_atlas:AML.T0057", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:owasp_aisvs:C8.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-03.3", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:mitre_atlas:AML.T0066", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:mitre_atlas:AML.T0100", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.1", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:mitre_atlas:AML.T0066", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:mitre_atlas:AML.T0100", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-04.2", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-05.2", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-05.2", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-05.2", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-05.2", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-05.2", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-05.2", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-05.2", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-05.2", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-05.2", "target": "clause:owasp_aisvs:C8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-05.2", "target": "clause:owasp_aisvs:C8.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-05.2", "target": "clause:owasp_aisvs:C8.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-05.2", "target": "clause:owasp_aisvs:C9.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DAT-05.2", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:mitre_atlas:AML.M0013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:mitre_atlas:AML.T0099", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-02.2", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.1", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.1", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.1", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.1", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.1", "target": "clause:mitre_atlas:AML.T0081", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.1", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.1", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.1", "target": "clause:owasp_aisvs:C10.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.1", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.1", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.1", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.1", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.1", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:mitre_atlas:AML.M0013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:mitre_atlas:AML.T0099", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.2", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:imda_mgf:2.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:owasp_aisvs:C11.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:owasp_aisvs:C3.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-03.3", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:imda_mgf:2.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.1", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:mitre_atlas:AML.M0013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:mitre_atlas:AML.T0099", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:owasp_aisvs:C3.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:owasp_aisvs:C6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:owasp_aisvs:C6.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:DEV-04.2", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.1", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.1", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.1", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.1", "target": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.1", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.1", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:imda_mgf:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:mitre_atlas:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:mitre:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:owasp_ai_exchange:seceducate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-03.3", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:imda_mgf:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:iso_42001:A.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:mitre_atlas:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:mitre:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:owasp_ai_exchange:seceducate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-04.3", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-05.1", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-05.1", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-05.1", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-05.1", "target": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-05.1", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:GOV-05.1", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:iso_42001:A.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:iso_42001:A.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:nist_rmf:AI RMF: Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:owasp_aisvs:C3.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-02.2", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.1", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.1", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.1", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.1", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.1", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.1", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.1", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.1", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.1", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.1", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-03.3", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.1", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.1", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.1", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.1", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.1", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.1", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.1", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.1", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.1", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.1", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.2", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.2", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.2", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.2", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.2", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.2", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.2", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.2", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.2", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.2", "target": "clause:owasp_aisvs:C9.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.2", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.2", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:mitre_atlas:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:mitre_atlas:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_aisvs:C5.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_aisvs:C9.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-04.3", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.1", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:eu_ai_act:19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:iso_42001:A.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:iso_42001:A.6.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:mitre_atlas:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:mitre_atlas:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:mitre_atlas:AML.T0101", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:nist_rmf:AI RMF: Govern, Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:owasp_aisvs:C9.2.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:owasp_aisvs:C9.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:owasp_aisvs:C9.5.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:mitre_atlas:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:mitre_atlas:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:owasp_aisvs:C5.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:owasp_aisvs:C9.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IAM-05.3", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-03.3", "target": "clause:imda_mgf:2.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-03.3", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-03.3", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-03.3", "target": "clause:mitre_atlas:AML.T0025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-03.3", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-03.3", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-03.3", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-03.3", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-03.3", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.1", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.1", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.1", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.1", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.1", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.1", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.1", "target": "clause:owasp_aisvs:C12.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.1", "target": "clause:owasp_aisvs:C12.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.3", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.3", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.3", "target": "clause:owasp_aisvs:C3.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.3", "target": "clause:owasp_aisvs:C3.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.3", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:INF-04.3", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-02.1", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-02.1", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-02.1", "target": "clause:owasp_aisvs:C3.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-02.1", "target": "clause:owasp_aisvs:C3.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-02.1", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-02.1", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.1", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.1", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.1", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.1", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.1", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.1", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.1", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.1", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.1", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.1", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.1", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:imda_mgf:2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:owasp_aisvs:C12.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:owasp_aisvs:C9.3.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-04.3", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.1", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.1", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.1", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.1", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.1", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.1", "target": "clause:owasp_aisvs:C12.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.1", "target": "clause:owasp_aisvs:C9.3.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.1", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.1", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.2", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.2", "target": "clause:eu_ai_act:19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.2", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.2", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.2", "target": "clause:iso_42001:A.6.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.2", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.2", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.2", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.2", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.2", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.2", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.2", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:IR-05.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-02.2", "target": "clause:iso_42001:A.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-02.2", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-02.2", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-02.2", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-04.1", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-04.1", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-04.1", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-04.1", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-04.1", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-04.1", "target": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-04.1", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-04.1", "target": "clause:owasp_aisvs:C3.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-04.1", "target": "clause:owasp_aisvs:C6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-04.1", "target": "clause:owasp_aisvs:C6.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-04.1", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-04.1", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-04.1", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-05.1", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-05.1", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-05.1", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-05.1", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-05.1", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-05.1", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-05.1", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-05.1", "target": "clause:owasp_aisvs:C11.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MOD-05.1", "target": "clause:owasp_aisvs:C3.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-02.1", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-02.1", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-02.1", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-02.1", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-02.1", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-02.1", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-02.1", "target": "clause:owasp_aisvs:C12.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-02.1", "target": "clause:owasp_aisvs:C12.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.1", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.1", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.1", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.1", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.1", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.1", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.1", "target": "clause:owasp_aisvs:C12.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.1", "target": "clause:owasp_aisvs:C12.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:mitre_atlas:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-03.2", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:eu_ai_act:19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:eu_ai_act:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:iso_42001:A.6.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:owasp_aisvs:C9.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.1", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:mitre_atlas:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.2", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:mitre_atlas:AML.T0057", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-04.3", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:imda_mgf:1.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:imda_mgf:2.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:MON-05.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-02.1", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-02.1", "target": "clause:iso_42001:A.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-02.1", "target": "clause:nist_rmf:AI RMF: Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-02.1", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-02.1", "target": "clause:owasp_aisvs:C3.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-02.1", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-04.2", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-04.2", "target": "clause:iso_42001:A.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-04.2", "target": "clause:nist_rmf:AI RMF: Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-04.2", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-04.2", "target": "clause:owasp_aisvs:C3.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-04.2", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-05.1", "target": "clause:imda_mgf:2.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-05.1", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-05.1", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-05.1", "target": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-05.1", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-05.1", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-05.1", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-05.1", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-05.1", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:ORG-05.1", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:RSK-02.2", "target": "clause:imda_mgf:2.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:RSK-02.2", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:RSK-02.2", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:RSK-02.2", "target": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:RSK-02.2", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:RSK-02.2", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:RSK-05.2", "target": "clause:iso_42001:A.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:RSK-05.2", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:RSK-05.2", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:csa_aismm:RSK-05.2", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 10", "target": "clause:databricks_unity:Unity Catalog", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 10", "target": "clause:databricks_unity:Unity Catalog \u2014 External Locations and Credentials", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 10", "target": "clause:dcam:Capability 5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 10", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 10", "target": "clause:eu_ai_act:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 10", "target": "clause:iso_27002:5.19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 10", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 10", "target": "clause:iso_8000:8000-110", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 10", "target": "clause:snowflake_horizon:Object tagging", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:data_contract_spec:Schema and Terms sections", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:databricks_unity:Column-Level Lineage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:databricks_unity:Data lineage and catalog metadata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:databricks_unity:Unity Catalog", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:databricks_unity:Unity Catalog lineage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:dcam:Capability 3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:dcam:Capability 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:dcam:Capability 5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:dcam:Capability 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:dcam:Component 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:eu_ai_act:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:google_dataplex:Data Lineage API", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:google_vertex_rag:Grounding and Citation APIs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:iso_27002:5.12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:iso_27701:7.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:iso_8000:8000-120", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:microsoft_purview:Data Estate Insights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:microsoft_purview:Data lineage (lineage extraction)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:microsoft_purview:Data Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:ms_ifc_agents:Propagate labels \u2014 labels travel with derivative results as", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:nist_pf:CT.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:openlineage:RunEvent object (OpenLineage.json JSON Schema)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:snowflake_horizon:Access History (object dependency lineage)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:w3c_prov:\u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 12", "target": "clause:w3c_prov:\u00a75.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:databricks_unity:Databricks Lakehouse Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:databricks_unity:Databricks Lakehouse Monitoring \u2014 Metric Tables", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:databricks_unity:Lakehouse Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:databricks_unity:Unity Catalog \u2014 Data Lineage and Auditing", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:dcam:Capability 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:dcam:Capability 5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:dcam:Capability 5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:dcam:Component 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:eu_ai_act:Annex IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:eu_data_act:3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:google_dataplex:Auto Data Quality", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:google_dataplex:Dataplex Auto Data Quality (scheduled/batch scans)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:google_dataplex:Dataplex Data Profile Scans", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:google_dataplex:Dataplex Data Quality \u2014 Quality Rules", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:google_vertex_rag:RAG grounding quality configuration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:google_vertex_rag:Vertex AI RAG \u2014 metadata filters at query time", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:google_vertex_rag:Vertex AI RAG Engine \u2014 retrieval telemetry and evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_27002:5.12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_30401:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_30401:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_30401:7.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_30401:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_30401:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_30401:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_42001:6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:iso_8000:8000-8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:itil_4:\u00a75.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:itil_4:\u00a75.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:itil_4:Continual Improvement Practice", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:itil_4:Incident Management Practice", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:microsoft_azure_ai:Azure AI Compliance \u2014 Evidence Collection for Audits", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:microsoft_azure_ai:Azure AI Search \u2014 Index Schema", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:microsoft_azure_ai:Azure AI Search \u2014 monitoring and search traffic analytics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:microsoft_purview:Data Catalog \u2014 Data Lineage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:microsoft_purview:Data Health Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:microsoft_purview:Data Quality (data type and format rules)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:microsoft_purview:Purview Compliance Manager", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:nist_pf:PR.DS-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:owasp_ai_exchange:runtimemodeliointegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:snowflake_horizon:Data Quality \u2014 Quality Metric Functions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:snowflake_horizon:Snowflake Data Metric Functions \u2014 History", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:w3c_prov:\u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:w3c_prov:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 13", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 14", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 14", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 14", "target": "clause:iso_8000:8000-8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 14", "target": "clause:nist_pf:CT.DP-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 14", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 15", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 15", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 15", "target": "clause:iso_30401:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 15", "target": "clause:iso_30401:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 15", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 15", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 15", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:dcam:Capability 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:dcam:Capability 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:eu_ai_act:47", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:eu_ai_act:53", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:google_vertex_rag:Grounding \u2014 Data Source Configuration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:iso_27002:5.36", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:iso_30401:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:iso_30401:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:iso_30401:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:iso_30401:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:iso_42001:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:itil_4:\u00a75.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 3", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 4", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 4", "target": "clause:iso_27002:5.12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 4", "target": "clause:iso_30401:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 4", "target": "clause:iso_42001:6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 6", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 6", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 6", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 6", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 6", "target": "clause:google_dataplex:Cloud Storage \u2014 Object Integrity and Retention Lock", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 6", "target": "clause:iso_27002:8.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 6", "target": "clause:iso_27701:7.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 6", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 6", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 6", "target": "clause:nist_pf:CT.DM-P4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 6", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:databricks_unity:Unity Catalog \u2014 Tags and Column-Level Security", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:dcam:Component 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:eu_ai_act:Annex IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:eu_data_gov_act:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:gdpr:30", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:gdpr:32", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:iso_27002:5.12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:iso_27701:6.9.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:iso_27701:7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:iso_27701:7.4.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:iso_27701:8.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:iso_42001:A.7.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:iso_5259:5259-1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:microsoft_purview:Microsoft platform encryption in transit (TLS)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:microsoft_purview:Purview Audit (unified audit log)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:microsoft_purview:Purview Insider Risk Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:mitre:AML.M0000", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:mitre:AML.M0001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:ms_ifc_agents:Confidentiality label read-access list ({Alice, Bob, Charlie", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:nist_pf:CT.PO-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:nist_pf:GV.MT-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:nist_pf:ID.IM-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:nist_pf:PR.AC-P4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:nist_pf:PR.DS-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:owasp_ai_exchange:discrete", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 7", "target": "clause:owasp_ai_exchange:segregatedata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:databricks_unity:Delta Lake schema enforcement and evolution", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:databricks_unity:Delta Sharing (open protocol)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:databricks_unity:Unity Catalog \u2014 data lineage for ingestion jobs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:dcam:Capability 3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:dcam:Capability 5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:google_dataplex:BigQuery schema management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:google_dataplex:Dataplex Universal Catalog (Data Catalog successor)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:iso_8000:8000-110", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:snowflake_horizon:Access History", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 8", "target": "clause:snowflake_horizon:Data Quality Monitoring (data metric functions)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 9", "target": "clause:databricks_unity:Delta Lake \u2014 time travel and version history", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 9", "target": "clause:databricks_unity:Delta Lake time travel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 9", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 9", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 9", "target": "clause:iso_27002:8.15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 9", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 9", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 9", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 9", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 9", "target": "clause:w3c_prov:\u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 9", "target": "clause:w3c_prov:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 9", "target": "clause:w3c_prov:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dama_dmbok:Ch. 9", "target": "clause:w3c_prov:\u00a75.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:data_contract_spec:Schema and Terms sections", "target": "clause:databricks_unity:Unity Catalog", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:data_contract_spec:Schema and Terms sections", "target": "clause:dcam:Capability 3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:data_contract_spec:Schema and Terms sections", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:data_contract_spec:Schema and Terms sections", "target": "clause:microsoft_purview:Data Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Column-Level Lineage", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Column-Level Lineage", "target": "clause:google_dataplex:Data Lineage API", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Column-Level Lineage", "target": "clause:iso_8000:8000-120", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Column-Level Lineage", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Column-Level Lineage", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Column-Level Lineage", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Column-Level Lineage", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Data lineage and catalog metadata", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Data lineage and catalog metadata", "target": "clause:iso_27002:5.12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Data lineage and catalog metadata", "target": "clause:w3c_prov:\u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Databricks Lakehouse Monitoring", "target": "clause:dcam:Capability 5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Databricks Lakehouse Monitoring", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Databricks Lakehouse Monitoring", "target": "clause:google_dataplex:Dataplex Data Profile Scans", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Databricks Lakehouse Monitoring", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Databricks Lakehouse Monitoring", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Databricks Lakehouse Monitoring \u2014 Metric Tables", "target": "clause:dcam:Capability 5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Databricks Lakehouse Monitoring \u2014 Metric Tables", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Databricks Lakehouse Monitoring \u2014 Metric Tables", "target": "clause:snowflake_horizon:Snowflake Data Metric Functions \u2014 History", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Delta Lake \u2014 time travel and version history", "target": "clause:eu_ai_act:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Delta Lake \u2014 time travel and version history", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Delta Lake \u2014 time travel and version history", "target": "clause:w3c_prov:\u00a75.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Delta Lake schema enforcement and evolution", "target": "clause:dcam:Capability 3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Delta Lake schema enforcement and evolution", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Delta Lake schema enforcement and evolution", "target": "clause:google_dataplex:BigQuery schema management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Delta Lake schema enforcement and evolution", "target": "clause:snowflake_horizon:Access History", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Delta Lake time travel", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Delta Lake time travel", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Delta Lake time travel", "target": "clause:w3c_prov:\u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Delta Sharing (open protocol)", "target": "clause:dcam:Capability 3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Delta Sharing (open protocol)", "target": "clause:google_dataplex:Dataplex Universal Catalog (Data Catalog successor)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "target": "clause:dcam:Capability 5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "target": "clause:iso_8000:8000-110", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "target": "clause:iso_8000:8000-8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "target": "clause:microsoft_purview:Data Quality (data type and format rules)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "target": "clause:snowflake_horizon:Data Quality Monitoring (data metric functions)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Lakehouse Monitoring", "target": "clause:dcam:Capability 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog", "target": "clause:dcam:Capability 3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog", "target": "clause:dcam:Capability 5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog", "target": "clause:dcam:Capability 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog", "target": "clause:iso_8000:8000-110", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog", "target": "clause:microsoft_purview:Data Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog", "target": "clause:snowflake_horizon:Access History (object dependency lineage)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog", "target": "clause:snowflake_horizon:Object tagging", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 Data Lineage and Auditing", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 Data Lineage and Auditing", "target": "clause:eu_data_act:3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 Data Lineage and Auditing", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 Data Lineage and Auditing", "target": "clause:microsoft_purview:Data Catalog \u2014 Data Lineage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 Data Lineage and Auditing", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 Data Lineage and Auditing", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 data lineage for ingestion jobs", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 data lineage for ingestion jobs", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 data lineage for ingestion jobs", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 External Locations and Credentials", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 External Locations and Credentials", "target": "clause:eu_ai_act:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 External Locations and Credentials", "target": "clause:iso_27002:5.19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 External Locations and Credentials", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 fine-grained access control", "target": "clause:eu_ai_act:15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 fine-grained access control", "target": "clause:iso_27002:5.15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 fine-grained access control", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 Tags and Column-Level Security", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 Tags and Column-Level Security", "target": "clause:iso_27002:5.12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog \u2014 Tags and Column-Level Security", "target": "clause:iso_42001:A.7.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog Data Lineage and Impact Analysis", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog Data Lineage and Impact Analysis", "target": "clause:iso_30401:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog Data Lineage and Impact Analysis", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog Data Lineage and Impact Analysis", "target": "clause:itil_4:\u00a75.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog lineage", "target": "clause:dcam:Capability 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog lineage", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog lineage", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog lineage", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog lineage", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog lineage", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:databricks_unity:Unity Catalog lineage", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 2.1", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 2.1", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 2.1", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 3.3", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 3.3", "target": "clause:google_dataplex:BigQuery schema management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 3.3", "target": "clause:google_dataplex:Dataplex Universal Catalog (Data Catalog successor)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 3.3", "target": "clause:microsoft_purview:Data Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 3.3", "target": "clause:snowflake_horizon:Access History", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:eu_ai_act:17", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:google_dataplex:Auto Data Quality", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:google_dataplex:Dataplex Data Quality \u2014 Quality Rules", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:iso_8000:8000-8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:microsoft_purview:Data Estate Insights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.1", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.2", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.2", "target": "clause:eu_ai_act:18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.2", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.2", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.2", "target": "clause:google_dataplex:Dataplex Data Profile Scans", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.2", "target": "clause:iso_27701:7.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.2", "target": "clause:iso_8000:8000-110", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.2", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.2", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.2", "target": "clause:snowflake_horizon:Object tagging", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.2", "target": "clause:snowflake_horizon:Snowflake Data Metric Functions \u2014 History", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.3", "target": "clause:eu_ai_act:73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.3", "target": "clause:eu_ai_act:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.3", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.3", "target": "clause:iso_8000:8000-110", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.3", "target": "clause:microsoft_purview:Data Health Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.3", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.3", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 5.3", "target": "clause:snowflake_horizon:Data Quality Monitoring (data metric functions)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 6.1", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 6.1", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 6.1", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Capability 6.1", "target": "clause:snowflake_horizon:Access History (object dependency lineage)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 3", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 3", "target": "clause:microsoft_purview:Data lineage (lineage extraction)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 3", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 3", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 3", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 3", "target": "clause:openlineage:RunEvent object (OpenLineage.json JSON Schema)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 3", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 7", "target": "clause:eu_ai_act:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 7", "target": "clause:eu_ai_act:Annex IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 7", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 7", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 7", "target": "clause:microsoft_purview:Purview Compliance Manager", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 7", "target": "clause:nist_pf:CT.PO-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dcam:Component 7", "target": "clause:owasp_ai_exchange:segregatedata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:doj_ai:ADA application to algorithmic hiring tools ('screen out' di", "target": "clause:eeoc_ai:Adverse impact assessment under Title VII (Q&A technical ass", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:doj_ai:ADA application to algorithmic hiring tools ('screen out' di", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:doj_ai:ADA application to algorithmic hiring tools ('screen out' di", "target": "clause:eu_charter:21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:doj_ai:ADA application to algorithmic hiring tools ('screen out' di", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:doj_ai:ADA application to algorithmic hiring tools ('screen out' di", "target": "clause:ibm_ai_fairness:Protected attribute specification (privileged/unprivileged g", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:doj_ai:ADA application to algorithmic hiring tools ('screen out' di", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:doj_ai:ADA application to algorithmic hiring tools ('screen out' di", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:doj_ai:ADA application to algorithmic hiring tools ('screen out' di", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:doj_ai:ADA application to algorithmic hiring tools ('screen out' di", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:google_sre:Ch. 2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:google_sre:Ch. 22", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:google_sre:Ch. 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:google_sre:Error budget policies \u2014 Service tier definition by SLO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:google_sre:Google SRE \u2014 Production readiness review and change manageme", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:google_sre:Production readiness review \u2014 Availability requirements", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:iso_22301:8.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:iso_27031:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:iso_27031:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:microsoft_azure_resil:Azure Resiliency \u2014 Availability zone design and geo-redundan", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 infrastructure-as-code recovery (A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Business continuity planning methodol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 BCDR design guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 Business continuity tiering by service", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:nist_800_160_v2:\u00a72.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:nist_800_160_v2:Appendix D", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:nist_csf:ID.AM-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:nist_csf:RC.RP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:nist_sp800_34:\u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:nist_sp800_34:\u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical capability levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:11", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:enisa_ai:Cybersecurity of AI and Standardisation (2023) \u2014 document-le", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:google_sre:Ch. 14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:google_sre:Ch. 22", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:google_sre:Error budget policies \u2013 Multi-region SLO maintenance and fai", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:google_sre:Google SRE \u2014 Postmortem practices and error budget policies:", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:google_sre:Incident management \u2014 Verification of data consistency befor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:google_sre:Incident management and Production Readiness Review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:google_sre:Postmortem practices \u2014 Timestamped action log and incident t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:google_sre:Production Readiness Review \u2014 Failover procedures and incide", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:google_sre:Production Readiness Review \u2014 Rollback readiness criteria", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:google_sre:SLO management \u2014 Error budget consumption and SLA breach det", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:google_sre:SLO/Error Budget Policy \u2013 Defining and enforcing availabilit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:iso_22301:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:iso_22301:8.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:iso_27031:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Geo-redundant storage design, Azur", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:microsoft_azure_resil:BCDR \u2013 Recovery objectives (RTO/RPO) definition and validati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:microsoft_azure_resil:BCDR \u2014 Data backup, geo-redundant recovery, and RPO verifica", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:microsoft_azure_resil:BCDR \u2014 Failover configuration and availability zone design", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery documentation and activity l", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery objectives and failover conf", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:microsoft_azure_resil:Circuit Breaker Pattern \u2014 Azure Architecture Center", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:microsoft_azure_resil:Failover configuration \u2014 Blue/green deployment and deploymen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:microsoft_azure_resil:Failover configuration \u2014 Return-to-service validation and pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:microsoft_azure_resil:RE:05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 RTO/RPO measurement and BCDR complianc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:nist_csf:ID.IM-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:nist_csf:PR.IR-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:nist_csf:RC.RP-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:nist_csf:RC.RP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:nist_sp800_34:\u00a73.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:nist_sp800_34:\u00a73.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:12", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard decisions affecting deployed mod", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:13", "target": "clause:google_sre:Postmortem practices \u2014 Structured incident report with timel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:13", "target": "clause:iso_22301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:13", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:13", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Post-recovery documentation and compl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:13", "target": "clause:nist_csf:ID.IM-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:13", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:17", "target": "clause:google_sre:Incident management and postmortem practices", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:17", "target": "clause:google_sre:Postmortem Culture \u2013 Blameless postmortems with tracked acti", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:17", "target": "clause:iso_22301:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:17", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:17", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:17", "target": "clause:microsoft_azure_resil:BCDR \u2013 Post-incident review and recovery objective validatio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:17", "target": "clause:microsoft_azure_resil:Failover configuration and recovery objectives", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:17", "target": "clause:nist_csf:ID.IM-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:17", "target": "clause:nist_csf:RC.RP", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:17", "target": "clause:nist_sp800_34:\u00a74.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:17", "target": "clause:nist_sp800_34:\u00a74.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:19", "target": "clause:google_sre:Google SRE \u2014 Postmortem practices and production readiness r", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:19", "target": "clause:google_sre:Incident management \u2014 Incident Commander role and structured", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:19", "target": "clause:iso_22301:8.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:19", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:19", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:19", "target": "clause:iso_27031:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:19", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 BCDR documentation, failover test", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:19", "target": "clause:microsoft_azure_resil:Business continuity planning \u2014 Communication procedures and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:19", "target": "clause:nist_csf:ID.IM-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:19", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:19", "target": "clause:nist_sp800_34:\u00a74.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:25", "target": "clause:google_sre:Production Readiness Review \u2013 Reliability and resilience con", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:25", "target": "clause:google_sre:Production readiness review: fault tolerance criteria", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:25", "target": "clause:iso_22301:8.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:25", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:25", "target": "clause:microsoft_azure_resil:BCDR \u2013 Testing and validation of failover and recovery contr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:25", "target": "clause:microsoft_azure_resil:BCDR documentation: fault tolerance evidence", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:25", "target": "clause:nist_csf:GV.OC-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:25", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:25", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:25", "target": "clause:nist_sp800_34:\u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:26", "target": "clause:google_sre:Ch. 22", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:26", "target": "clause:google_sre:Ch. 33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:26", "target": "clause:google_sre:Disaster Recovery Testing (DiRT) and game days", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:26", "target": "clause:iso_22301:8.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:26", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:26", "target": "clause:microsoft_azure_resil:BCDR \u2013 Chaos testing and resilience validation (Azure Chaos", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:26", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Testing and validation program", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:26", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:26", "target": "clause:nist_800_160_v2:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:26", "target": "clause:nist_csf:ID.IM-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:26", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:eu_ai_act:6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:eu_ai_act:Annex III", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:google_sre:Cascading failure prevention", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:google_sre:Production Readiness Review \u2013 Third-party dependency resilie", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:iso_22301:8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:iso_22301:8.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:iso_37301:4.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:microsoft_azure_resil:BCDR \u2013 Third-party service dependency continuity planning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Geo-redundancy and failover configura", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:nist_csf:GV.SC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:28", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven availability changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:30", "target": "clause:google_sre:Postmortem practices and PRR \u2013 Resilience evidence from SRE", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:30", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:30", "target": "clause:microsoft_azure_resil:Business continuity planning \u2013 BCDR evidence documentation a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:30", "target": "clause:nist_csf:GV.RR-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:30", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:5", "target": "clause:google_sre:Production readiness review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:5", "target": "clause:google_sre:Toil reduction and on-call practices", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:5", "target": "clause:iso_22301:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:5", "target": "clause:iso_22301:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:5", "target": "clause:iso_22301:7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:5", "target": "clause:microsoft_azure_resil:Business continuity planning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:5", "target": "clause:nist_csf:GV.RR", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:5", "target": "clause:nist_csf:GV.RR-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:5", "target": "clause:nist_csf:GV.SC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:5", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:5", "target": "clause:nist_sp800_34:\u00a72.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:5", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 leadership risk ownership", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:5", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:google_sre:Ch. 32", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:google_sre:Error budget policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:google_sre:Google SRE \u2014 Incident management, postmortem practices, and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:google_sre:Production readiness review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:google_sre:SLO/SLA management and error budget policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:iso_22301:6.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:iso_22301:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:iso_22301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:iso_27031:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 design guidance for regulated work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Design lifecycle integration: BCDR", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:microsoft_azure_resil:BCDR design guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:nist_800_160_v2:\u00a72.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:nist_800_160_v2:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:nist_csf:GV.OV-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:nist_csf:GV.OV-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:nist_csf:GV.PO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Capabilities and Safeguards Repor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:6", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a75.1 Internal governanc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:7", "target": "clause:google_sre:Ch. 22", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:7", "target": "clause:nist_csf:PR.IR-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:9", "target": "clause:google_sre:Ch. 21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:9", "target": "clause:google_sre:Ch. 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:9", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Deployment rollback and blue-green re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:9", "target": "clause:microsoft_azure_resil:Bulkhead pattern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:9", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:9", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dora:9", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:3", "target": "clause:gdpr:3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:3", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:3", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 regulatory assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:3", "target": "clause:openai_privacy:OpenAI trust and compliance documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:3", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:6", "target": "clause:gdpr:7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:6", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 automated deprovisioning workflo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:6", "target": "clause:okta_iam:Okta Universal Directory \u2014 custom profile attributes for con", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:6", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 customer content and train", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:6", "target": "clause:openai_privacy:OpenAI privacy request processing \u2014 data deletion", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:6", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:ch. III", "target": "clause:gdpr:12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:ch. III", "target": "clause:okta_iam:Okta + DataGrail integration \u2014 automated DSR intake", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:dpdp:ch. III", "target": "clause:openai_privacy:OpenAI privacy request channels (privacy.openai.com / dsar@o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3", "target": "clause:gdpr:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3", "target": "clause:google_saif:Google Cloud Sensitive Data Protection (Cloud DLP)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3", "target": "clause:google_saif:Inferred Sensitive Data risk \u2014 Training Data Management / Ou", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3", "target": "clause:microsoft_rai:Microsoft Purview Information Protection Classification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3", "target": "clause:nist_pf:CT.DP-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3", "target": "clause:openai_privacy:OpenAI usage policies \u2014 restricted inference uses", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.2", "target": "clause:gdpr:32", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.2", "target": "clause:gdpr:7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.2", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 output inspection a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.2", "target": "clause:microsoft_rai:Microsoft Purview Data Loss Prevention \u2014 generative AI app c", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.2", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.2", "target": "clause:nist_pf:CT.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.2", "target": "clause:nist_pf:PR.DS-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.2", "target": "clause:okta_iam:Okta API Access Management \u2014 OAuth scopes and consent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.2", "target": "clause:openai_privacy:OpenAI Enterprise Privacy \u2014 customer responsibility for lawf", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.2", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.2", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.3", "target": "clause:gdpr:9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.3", "target": "clause:google_saif:Inferred Sensitive Data risk \u2014 Output Validation and Sanitiz", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.3", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.3", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.3", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:edpb_opinion_28_2024:3.3", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eeoc_ai:Adverse impact assessment under Title VII (Q&A technical ass", "target": "clause:eu_ai_act:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eeoc_ai:Adverse impact assessment under Title VII (Q&A technical ass", "target": "clause:eu_charter:21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eeoc_ai:Adverse impact assessment under Title VII (Q&A technical ass", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eeoc_ai:Adverse impact assessment under Title VII (Q&A technical ass", "target": "clause:ibm_ai_fairness:Protected attribute specification (privileged/unprivileged g", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eeoc_ai:Adverse impact assessment under Title VII (Q&A technical ass", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eeoc_ai:Adverse impact assessment under Title VII (Q&A technical ass", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eeoc_ai:Adverse impact assessment under Title VII (Q&A technical ass", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eeoc_ai:Adverse impact assessment under Title VII (Q&A technical ass", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:19a", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:19a", "target": "clause:oidc_federation:\u00a79", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:19a", "target": "clause:okta_iam:Okta Universal Directory \u2014 Federation Trust Config", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:19a", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Trust Framework", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:20", "target": "clause:nist_800_63:SP 800-63C-4 \u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:20", "target": "clause:okta_iam:Okta trust page (trust.okta.com) \u2014 third-party audit certifi", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:20", "target": "clause:openid:OpenID Connect Core 1.0 \u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:20", "target": "clause:ping_identity:Ping Identity compliance certifications (SOC 2 Type II, ISO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:45b", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:45b", "target": "clause:ping_identity:PingOne Credentials \u2014 eIDAS 2.0-aligned verifiable credentia", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:45b", "target": "clause:w3c_did:\u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:45b", "target": "clause:w3c_did:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:5a", "target": "clause:google_saif:Google Cloud WIF \u2014 External OIDC Verification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:5a", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:5a", "target": "clause:ping_identity:PingOne Credentials \u2014 W3C Verifiable Credentials / DID", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:5a", "target": "clause:w3c_did:\u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:5a", "target": "clause:w3c_did:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:6", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:6", "target": "clause:nist_800_63:SP 800-63C-4 \u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:6", "target": "clause:ping_identity:Ping Identity \u2014 Federated Cross Org Authorization", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:Regulation (EU) 2024/1183", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:Regulation (EU) 2024/1183", "target": "clause:nist_800_63:SP 800-63-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eidas2:Regulation (EU) 2024/1183", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 'Building trust' public disclosu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:enisa_ai:Cybersecurity of AI and Standardisation (2023) \u2014 document-le", "target": "clause:google_sre:SLO/Error Budget Policy \u2013 Defining and enforcing availabilit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:enisa_ai:Cybersecurity of AI and Standardisation (2023) \u2014 document-le", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:enisa_ai:Cybersecurity of AI and Standardisation (2023) \u2014 document-le", "target": "clause:microsoft_azure_resil:BCDR \u2013 Recovery objectives (RTO/RPO) definition and validati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:enisa_ai:Cybersecurity of AI and Standardisation (2023) \u2014 document-le", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:enisa_ai:Cybersecurity of AI and Standardisation (2023) \u2014 document-le", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:etsi_gr_sai_005:5.3", "target": "clause:nist_ai_100_2:NISTAML.021", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:etsi_gr_sai_005:5.3", "target": "clause:nist_ai_100_2:NISTAML.023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:etsi_gr_sai_005:5.3", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:etsi_gr_sai_005:5.3", "target": "clause:owasp_ml_top10:ML10:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:etsi_gr_sai_005:6.4", "target": "clause:nist_ai_100_2:NISTAML.032", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:etsi_gr_sai_005:6.4", "target": "clause:owasp_ai_exchange:modelobfuscation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:etsi_gr_sai_005:6.4", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:etsi_gr_sai_005:6.4", "target": "clause:owasp_aisvs:C11.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:etsi_gr_sai_005:6.4", "target": "clause:owasp_ml_top10:ML03:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:eu_charter:21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:eu_data_act:3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:gdpr:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:gdpr:4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:google_dataplex:Auto Data Quality", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:google_dataplex:BigQuery schema management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:google_dataplex:Data Lineage API", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:google_dataplex:Dataplex Data Quality \u2014 Quality Rules", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Data Sovereignty and Use Restrict", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 pseudonymization an", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:google_saif:Privacy Enhancing Technologies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:google_vertex_rag:Vertex AI RAG \u2014 metadata filters at query time", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:ibm_ai_fairness:Demographic parity difference and equalized odds difference", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:ibm_ai_fairness:Disaggregated (subgroup) performance metrics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:ibm_ai_fairness:Disparate impact metric (four-fifths rule)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:ibm_ai_fairness:Protected attribute specification (privileged/unprivileged g", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:ieee_7000:Clause 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_27002:5.12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_27002:5.19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_27002:8.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_27701:7.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_27701:7.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_27701:7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_27701:7.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_30401:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_30401:7.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_30401:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_42001:6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_42001:A.7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_42001:A.7.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_5259:5259-1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_8000:8000-120", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:iso_8000:8000-8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibited", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:microsoft_purview:Data Catalog \u2014 Data Lineage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:microsoft_purview:Data lineage (lineage extraction)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:microsoft_purview:Data Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:microsoft_purview:Data Quality (data type and format rules)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:microsoft_purview:Microsoft Purview \u2014 Sensitive Information Types and DLP", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:microsoft_rai:Azure Policy + Microsoft Purview Data Governance \u2014 Automated", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:microsoft_rai:Microsoft Purview Information Protection \u2014 classification an", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:microsoft_rai:PS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:mitre:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:mitre:AML.T0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:mitre:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_800_53:AC-23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_ai_100_2:NISTAML.012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_ai_100_2:NISTAML.013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_ai_600_1:DATA-PRIVACY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_pf:CT.DM-P4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_pf:CT.DP-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_pf:CT.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_pf:ID.IM-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_rmf:GOVERN-6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_rmf:MAP-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_rmf:MEASURE 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_rmf:MEASURE-2.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_rmf:MEASURE-2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:openlineage:Run events (OpenLineage OpenAPI spec)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:openlineage:RunEvent object (OpenLineage.json JSON Schema)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_aitg:AITG-MOD-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:owasp_ml_top10:ML02:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:salesforce_trust:Data masking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:snowflake_horizon:Access History", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:soc2:CC6.6, CC6.7, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:soc2:PI1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:10", "target": "clause:w3c_prov:\u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:google_compliance:Compliance Reports Manager", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:google_financial:Model Cards", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:ieee_7000:Clause 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_27001:A.5.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_27701:7.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_30401:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_37301:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_37301:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_42001:7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_42001:A.6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:microsoft_compliance:Compliance Manager platform", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:microsoft_purview:Purview Compliance Manager", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:mitre_atlas:AML.T0010", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:mitre:AML.T0044", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:nist_pf:GV.MT-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:nist_rmf:GOVERN 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:nist_rmf:GOVERN-1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:nist_rmf:GOVERN-4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74) and Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:owasp_aisvs:C9.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:pcaob_as_2201:\u00b6.39-.42", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:pcaob_as_2201:\u00b6.68-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:soc2:CC2.2 & CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:soc2:CC5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:11", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:iso_27001:A.8.15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:iso_27002:8.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:iso_27002:8.15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:iso_27701:7.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:iso_42001:6.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:iso_42001:A.6.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:mitre_atlas:AML.T0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:mitre:AML.T0044", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:ms_ifc_agents:Propagate labels \u2014 labels travel with derivative results as", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:nist_ai_600_1:MS-2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:nist_csf:PR.DS-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:nist_pf:CT.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:nist_rmf:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:nist_rmf:GOVERN-1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:nist_rmf:MEASURE-2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:owasp_aisvs:C9.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:owasp_aitg:AITG-MOD-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:w3c_prov:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:12", "target": "clause:w3c_prov:\u00a75.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:eu_charter:47", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:eu_charter:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:google_vertex_rag:Grounded generation \u2014 grounding supports and citations", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:google_vertex_rag:Grounding and Citation APIs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:google_vertex_rag:Grounding citations and source attribution", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:ibm_ai_fairness:Bias metric selection (metric matched to task and fairness d", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:ieee_7000:\u00a77", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:ieee_7000:\u00a79", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:ieee_7000:Clause 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:iso_30401:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:iso_42001:5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:iso_42001:7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:iso_42001:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:iso_42001:A.6.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:iso_42001:A.8.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:iso_42001:A.9.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:llm10:LLM09:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report + Purview \u2014 Dis", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:mitre_atlas:AML.T0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:nist_rmf:MANAGE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:nist_rmf:MAP-2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:nist_rmf:MEASURE 2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Disclosure and G", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy and Autonom", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:openai_transparency:System Card \u2014 Knowledge Limitations", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:owasp_aitg:AITG-APP-14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:soc2:CC2.3 / CC7.4 \u2014 External communication and incident response", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:w3c_prov:\u00a75.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:13", "target": "clause:w3c_prov:\u00a75.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:google_saif:Agent User Control (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:ieee_7000:Clause 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:iso_31000:6.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:nist_rmf:GOVERN-3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:openai_model_spec:The chain of command", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:owasp_aitg:AITG-APP-13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:14", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:google_dataplex:Dataplex Auto Data Quality (scheduled/batch scans)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:google_financial:Cloud IAM", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:iso_27001:A.8.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:iso_27002:5.15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:iso_30401:4.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:iso_42001:A.6.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:microsoft_azure_ai:Azure AI Search Security Filters", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:mitre_atlas:AML.T0040", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:nist_800_53:RA-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:nist_800_53:SI-2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:nist_csf:ID.RA-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:nist_csf:ID.RA-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:nist_pf:PR.DS-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:nist_rmf:MANAGE-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:nist_rmf:MEASURE 2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:nist_rmf:MEASURE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:okta_financial:Okta access management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:okta_financial:Okta Privileged Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:owasp_ai_exchange:runtimemodeliointegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:owasp_aisvs:C11.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:snowflake_horizon:Data Quality \u2014 Quality Metric Functions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:sr26_2:\u00a7V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:sr26_2:\u00a7V (Outcomes Analysis)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:15", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:iso_37301:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:nist_rmf:GOVERN-1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:openai_policies:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:soc2:CC1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:16", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:gdpr:24", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:ieee_7000:\u00a711", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:ieee_7000:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:ieee_7000:Clause 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_27001:4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_27002:5.36", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_27002:8.15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_30401:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_30401:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_30401:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_30401:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_37301:4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_37301:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_37301:7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_37301:9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_37301:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_42001:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_42001:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:microsoft_compliance:Compliance score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:microsoft_compliance:Improvement Actions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:microsoft_compliance:ISO 42001 assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:microsoft_purview:Data Estate Insights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:mitre_atlas:AML.T0010", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:mitre:AML.M0021", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:mitre:AML.M0022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:nist_pf:GV.MT-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:nist_rmf:GOVERN 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:nist_rmf:GOVERN-2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:nist_rmf:GOVERN-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:nist_rmf:MAP 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:openai_policies:Data residency commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:soc2:CC1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:soc2:CC4.1 and CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:w3c_prov:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:17", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:eu_charter:1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:google_compliance:Compliance Reports Manager", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:google_financial:Model Cards", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:ieee_7000:Clause 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_27001:A.5.33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_27002:5.36", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_27701:7.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_30401:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_37301:7.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_37301:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:itil_4:\u00a75.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:microsoft_azure_ai:Azure AI Compliance \u2014 Evidence Collection for Audits", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:microsoft_compliance:Compliance Manager platform", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:nist_pf:GV.PO-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:omb_a_123:Section IV.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:pcaob_as_2201:\u00b6.72-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:18", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:iso_42001:A.6.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:nist_rmf:GOVERN 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:owasp_aisvs:C9.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:19", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:20", "target": "clause:gdpr:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:20", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:20", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:20", "target": "clause:nist_csf:RS.MI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:20", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:20", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:20", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:23", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:23", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:23", "target": "clause:iso_27701:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:23", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:23", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:23", "target": "clause:nist_pf:CT.PO-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:23", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:23", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:23", "target": "clause:owasp_ai_exchange:segregatedata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:23", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Non-Repudiable Principal Binding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:iso_27002:5.19", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:iso_31000:6.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:iso_42001:4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Principal Accountability for AI Ac", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:okta_authz:Okta Identity Tokens \u2014 Principal Identity Binding for AI Age", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:okta_financial:Okta Adaptive MFA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:25", "target": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:gdpr:28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Non-Repudiable Principal Binding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:ibm_ai_fairness:Fairness metrics (vendor due-diligence benchmark)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:imda_mgf:2.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:iso_31000:6.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:iso_37301:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:iso_42001:4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:iso_42001:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:iso_42001:A.6.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:meta_llama_rai:Responsible Use Guide (provider guidance); Llama Acceptable", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Principal Accountability for AI Ac", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:nist_rmf:GOVERN 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:nist_rmf:GOVERN 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:okta_authz:Okta Identity Tokens \u2014 Principal Identity Binding for AI Age", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:openai_preparedness:Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:openai_preparedness:Internal governance (\u00a75.1) \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:owasp_aisvs:C9.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:26", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:eu_charter:1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:ieee_7000:\u00a710", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:iso_42001:4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:microsoft_rai:I1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:microsoft_rai:Microsoft Responsible AI Impact Assessment template and guid", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Impact Assessment req", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:27", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:4", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:4", "target": "clause:ibm_ai_fairness:Fairness metrics and mitigation algorithms (training curricu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:4", "target": "clause:ieee_7000:Clause 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:4", "target": "clause:iso_42001:7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:4", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:4", "target": "clause:nist_rmf:GOVERN 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:iso_37301:9.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:iso_42001:4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:nis2:21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:okta_financial:Okta Privileged Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:sr26_2:\u00a7V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:43", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:47", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:47", "target": "clause:iso_27002:5.36", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:47", "target": "clause:iso_27701:5.8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:47", "target": "clause:iso_30401:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:47", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:47", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:47", "target": "clause:microsoft_rai:Azure AI certifications \u2014 ISO 27001, SOC 2, ISO 42001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:47", "target": "clause:openai_privacy:OpenAI certifications \u2014 SOC 2, ISO 27001, ISO 42001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:47", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:49", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:49", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:49", "target": "clause:occ_ai:Model Risk Management booklet (2021)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:49", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:49", "target": "clause:sr26_2:\u00a7VI (Model Inventory)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:eu_charter:1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:eu_charter:24", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 alignment with wide", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:ieee_7000:Clause 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibitio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:oecd_ai_principles:Principle 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:openai_model_spec:Stay in bounds (prohibited sexual content involving minors);", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:5", "target": "clause:un_ethics_ai:\u00b635\u2013\u00b636 (Human oversight and determination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:50", "target": "clause:eu_charter:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:50", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:50", "target": "clause:ieee_7000:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:50", "target": "clause:iso_42001:A.8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:50", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document); Build trans", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:50", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:50", "target": "clause:nist_ai_600_1:INFO-INTEGRITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:50", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:50", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:50", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:50", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:50", "target": "clause:soc2:P1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:50", "target": "clause:un_ethics_ai:\u00b637 (Transparency)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:53", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:53", "target": "clause:google_vertex_rag:Grounding \u2014 Data Source Configuration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:53", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:53", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:53", "target": "clause:soc2:CC2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:53", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:iso_42001:7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:mitre:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:mitre:AML.T0043", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:mitre:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:nist_ai_100_2:NISTAML.022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:nist_ai_600_1:CBRN", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:nist_rmf:MEASURE-2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:owasp_aitg:AITG-APP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:owasp_aitg:AITG-INF-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:owasp_aitg:AITG-MOD-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:55", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:6", "target": "clause:gdpr:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:6", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:6", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:6", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:6", "target": "clause:iso_37301:4.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:6", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:6", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:6", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:6", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:6", "target": "clause:nist_rmf:MAP-1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:6", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:6", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:6", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:fedramp_20x:KSI-MLA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:gdpr:32", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:ieee_7000:Clause 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:iso_30401:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:iso_37301:9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:iso_42001:A.7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:iso_42001:A.8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:itil_4:\u00a75.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:microsoft_compliance:Compliance score monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:mitre_atlas:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:nist_ai_100_2:NISTAML.023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:nist_csf:DE.CM-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:nist_csf:DE.CM-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:nist_rmf:GOVERN-4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:nist_rmf:MEASURE 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:nist_rmf:MEASURE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:nist_rmf:MEASURE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:nist_rmf:MEASURE-2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:owasp_aitg:AITG-INF-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:72", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:eu_charter:21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:gdpr:33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:gdpr:34", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:google_saif:Incident Response Management (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:ibm_ai_fairness:Bias mitigation algorithms (reweighing, adversarial debiasin", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:ieee_7000:Clause 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:iso_30401:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:itil_4:Incident Management Practice", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms; Llama Acceptabl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:mitre_atlas:ATLAS tactics and techniques (framework-wide)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:nist_csf:RS.AN", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:nist_csf:RS.CO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:nist_rmf:MEASURE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:soc2:CC7.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:soc2:CC7.4, CC7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:sox:\u00a7302(a)(5)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:73", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:74", "target": "clause:gdpr:31", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:74", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:74", "target": "clause:iso_37301:9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:74", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:74", "target": "clause:okta_governance:Access Requests", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:74", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:74", "target": "clause:soc2:CC2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:8", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:8", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:8", "target": "clause:openai_policies:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:85", "target": "clause:eu_charter:47", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:85", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:85", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:85", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:85", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:85", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:85", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:eu_charter:47", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:eu_charter:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:gdpr:22", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:google_saif:Agent Observability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:ibm_ai_fairness:Disparate impact metric", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:ieee_7000:Clause 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:iso_42001:7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Transparency goals", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:nist_rmf:MEASURE 2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:openai_privacy:OpenAI system cards \u2014 model behavior transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:86", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:eu_charter:26", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ffiec:IT Handbook \u2014 Development, Acquisition, and Maintenance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ftc_ai:FTC Act \u00a75 (unfair or deceptive practices) \u2014 2021 blog guida", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:gdpr:24", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:gdpr:25", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:gdpr:39", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_dataplex:Cloud Storage \u2014 Object Integrity and Retention Lock", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_dataplex:Dataplex Data Profile Scans", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_financial:Model Cards", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Managed Constraint Compli", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Policy Simulation for Con", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Resource Constraint Enfor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:google_vertex_rag:Check Grounding API", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ibm_ai_fairness:Dataset and classifier fairness metrics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ibm_ai_fairness:Fairness metric computation (batch, schedulable on productio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ibm_ai_fairness:Fairness metric suite (demographic parity difference, equali", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ibm_ai_fairness:Fairness metrics (quantitative outcome indicators)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ibm_ai_fairness:Subgroup fairness metrics and bias mitigation algorithms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ieee_7000:\u00a710", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ieee_7000:\u00a711", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ieee_7000:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ieee_7000:\u00a77", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ieee_7000:\u00a77.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ieee_7000:\u00a79", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ieee_7000:\u00a79.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ieee_7000:Clause 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ieee_7000:Clause 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:ieee_7000:Clause 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:imda_mgf:2.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_27001:4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_27002:5.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_30401:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_30401:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_30401:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_30401:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_31000:6.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_31000:6.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_37301:4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_37301:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_37301:6.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_37301:7.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_37301:9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:6.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:itil_4:\u00a75.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:itil_4:Continual Improvement Practice", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:llm10:LLM09:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:meta_llama_rai:Responsible AI considerations (fairness and inclusion)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:meta_llama_rai:System-level alignment \u2014 input/output mitigations; Llama Acc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_azure_ai:Azure AI Search index scope configuration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_compliance:Improvement actions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_compliance:ISO 42001 assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_purview:Data Health Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Model Deployment Restriction and Content S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:I1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:mitre_atlas:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:mitre:AML.M0021", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:mitre:AML.M0022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:mitre:AML.T0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:mitre:AML.T0043", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_800_53:CA-2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_ai_600_1:CONFABULATION", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_ai_600_1:HUMAN-AI-CONFIG", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_csf:GV.PO-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_csf:ID.RA-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:GOVERN 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:GOVERN-2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MANAGE 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MANAGE-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MAP 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MAP-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MEASURE 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MEASURE 2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MEASURE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MEASURE-2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MEASURE-2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:nist_rmf:MEASURE-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:oecd_ai_principles:Principle 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:okta_financial:Okta Privileged Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:okta_governance:Access Certifications", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:omb_a_123:Section II.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:omb_a_123:Section II.B", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:omb_a_123:Section III.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:omb_a_123:Section VI.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_model_spec:Stay in bounds; Seek the truth together; Do the best work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) and Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Ongoing Evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Tracked Categories and Deploymen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Sandbagging and Long-range Auto", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_aisvs:C11.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_aisvs:C3.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_aitg:AITG-APP-10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_aivss:AIVSS-AARS", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:pcaob_as_2201:\u00b6.20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:pcaob_as_2201:\u00b6.39", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:pcaob_as_2201:\u00b6.62-.70", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sec_ai:Proposed rule, Release 34-97990 (withdrawn 2025-06-12)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:snowflake_horizon:Snowflake Data Metric Functions \u2014 History", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:soc2:CC2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:soc2:CC3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sox:\u00a7301", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sox:\u00a7302(a)(4)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sr26_2:\u00a7V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sr26_2:\u00a7V (Outcomes Analysis)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sr26_2:\u00a7V + \u00a7VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:9", "target": "clause:w3c_prov:\u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:gdpr:35", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:google_financial:Explainable AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:iso_31000:6.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:iso_37301:4.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:owasp_aivss:AIVSS-AARS", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:pcaob_as_2201:\u00b6.20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:sec_ai:Proposed rule, Release 34-97990 (withdrawn 2025-06-12)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:sox:\u00a7302(a)(4)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex III", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:ibm_ai_fairness:Fairness metric taxonomy (~70 metrics)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:ieee_7000:\u00a77.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:iso_27001:A.5.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:microsoft_purview:Purview Compliance Manager", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:nyc_ll144:\u00a720-871 (Bias audit requirements)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:omb_a_123:Section IV.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:pcaob_as_2201:\u00b6.72-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_ai_act:Annex IV", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 alignment with wide", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:ieee_7000:Clause 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:oecd_ai_principles:Principle 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:1", "target": "clause:un_ethics_ai:\u00b635\u2013\u00b636 (Human oversight and determination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:ibm_ai_fairness:Bias mitigation algorithms (reweighing, adversarial debiasin", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:ibm_ai_fairness:Demographic parity difference and equalized odds difference", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:ibm_ai_fairness:Disparate impact metric (four-fifths rule)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:ibm_ai_fairness:Protected attribute specification (privileged/unprivileged g", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:ieee_7000:Clause 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms; Llama Acceptabl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibited", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:21", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:24", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:24", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:24", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibitio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:24", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:24", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:24", "target": "clause:openai_model_spec:Stay in bounds (prohibited sexual content involving minors);", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:26", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:26", "target": "clause:ibm_ai_fairness:Subgroup fairness metrics and bias mitigation algorithms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:26", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:26", "target": "clause:meta_llama_rai:Responsible AI considerations (fairness and inclusion)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:26", "target": "clause:microsoft_rai:I1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:26", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:26", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:26", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:iso_42001:7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:nist_rmf:MEASURE 2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:47", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:8", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:8", "target": "clause:ieee_7000:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:8", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:8", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document); Build trans", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:8", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:8", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:8", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:8", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:8", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:8", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:8", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:8", "target": "clause:un_ethics_ai:\u00b637 (Transparency)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_charter:8", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_act:3", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_act:3", "target": "clause:microsoft_purview:Data Catalog \u2014 Data Lineage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_act:3", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_act:3", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_gov_act:20", "target": "clause:gdpr:30", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_gov_act:20", "target": "clause:google_saif:Model and Data Inventory Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_gov_act:20", "target": "clause:iso_27701:7.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_gov_act:20", "target": "clause:microsoft_rai:Microsoft Purview Data Map \u2014 lineage tracking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_gov_act:20", "target": "clause:nist_pf:ID.IM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_gov_act:5", "target": "clause:gdpr:5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_gov_act:5", "target": "clause:mitre:AML.M0000", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_gov_act:5", "target": "clause:mitre:AML.M0001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_gov_act:5", "target": "clause:ms_ifc_agents:Confidentiality label read-access list ({Alice, Bob, Charlie", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_gov_act:5", "target": "clause:nist_pf:PR.AC-P4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:eu_data_gov_act:5", "target": "clause:owasp_ai_exchange:discrete", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:fapi_2_0:\u00a75.3.2", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:fapi_2_0:\u00a75.3.2", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:fapi_2_0:\u00a75.3.2", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:fapi_2_0:\u00a75.3.2", "target": "clause:okta_iam:Okta OIDC \u2014 Dynamic Client Registration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:fapi_2_0:\u00a75.3.2", "target": "clause:openid:RFC 9396", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:fapi_2_0:\u00a75.3.2", "target": "clause:ping_identity:PingFederate \u2014 OIDC Audience Validation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:fedramp_20x:KSI-MLA", "target": "clause:gdpr:32", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:fedramp_20x:KSI-MLA", "target": "clause:iso_37301:9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:fedramp_20x:KSI-MLA", "target": "clause:microsoft_compliance:Compliance score monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:fedramp_20x:KSI-MLA", "target": "clause:nist_csf:DE.CM-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ffiec:IT Handbook \u2014 Development, Acquisition, and Maintenance", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ffiec:IT Handbook \u2014 Development, Acquisition, and Maintenance", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ffiec:IT Handbook \u2014 Development, Acquisition, and Maintenance", "target": "clause:omb_a_123:Section II.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ffiec:IT Handbook \u2014 Development, Acquisition, and Maintenance", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ffiec:IT Handbook \u2014 Development, Acquisition, and Maintenance", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:finra:Regulatory Notice 24-09 (GenAI and LLMs)", "target": "clause:google_financial:Vertex AI Model Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:finra:Regulatory Notice 24-09 (GenAI and LLMs)", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:finra:Regulatory Notice 24-09 (GenAI and LLMs)", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:finra:Regulatory Notice 24-09 (GenAI and LLMs)", "target": "clause:omb_a_123:Section III.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:finra:Regulatory Notice 24-09 (GenAI and LLMs)", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:finra:Regulatory Notice 24-09 (GenAI and LLMs)", "target": "clause:pcaob_as_2201:\u00b6.14-.18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:finra:Regulatory Notice 24-09 (GenAI and LLMs)", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:finra:Regulatory Notice 24-09 (GenAI and LLMs)", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ftc_ai:FTC Act \u00a75 (unfair or deceptive practices) \u2014 2021 blog guida", "target": "clause:ibm_ai_fairness:Dataset and classifier fairness metrics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ftc_ai:FTC Act \u00a75 (unfair or deceptive practices) \u2014 2021 blog guida", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ftc_ai:FTC Act \u00a75 (unfair or deceptive practices) \u2014 2021 blog guida", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ftc_ai:FTC Act \u00a75 (unfair or deceptive practices) \u2014 2021 blog guida", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ftc_ai:FTC Act \u00a75 (unfair or deceptive practices) \u2014 2021 blog guida", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ftc_ai:FTC Act \u00a75 (unfair or deceptive practices) \u2014 2021 blog guida", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ftc_ai:FTC Act \u00a75 (unfair or deceptive practices) \u2014 2021 blog guida", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ftc_ai:FTC Act \u00a75 (unfair or deceptive practices) \u2014 2021 blog guida", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:12", "target": "clause:nist_pf:PR.AC-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:12", "target": "clause:okta_iam:Okta + DataGrail integration \u2014 automated DSR intake", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:12", "target": "clause:okta_iam:Okta Universal Directory and authentication policies \u2014 ident", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:12", "target": "clause:openai_privacy:OpenAI privacy request channels (privacy.openai.com / dsar@o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:15", "target": "clause:google_saif:Training Data Management \u2014 provenance and lineage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:15", "target": "clause:okta_iam:Okta scoped administrator roles \u2014 least-privilege data expor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:15", "target": "clause:openai_privacy:OpenAI privacy request fulfillment \u2014 personal data access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:15", "target": "clause:uk_duaa:access rights provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:17", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 de-identification A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:17", "target": "clause:iso_27701:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:17", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 account deactivation and deletio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:17", "target": "clause:openai_privacy:OpenAI data deletion controls", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:20", "target": "clause:nist_pf:CT.DM-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:20", "target": "clause:okta_iam:Okta Universal Directory \u2014 profile export APIs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:20", "target": "clause:openai_privacy:OpenAI API \u2014 customer data export", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:21", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 account suspension states", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:21", "target": "clause:openai_privacy:OpenAI enterprise data controls \u2014 business data not used for", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:21", "target": "clause:uk_duaa:automated decision rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:22", "target": "clause:google_saif:Agent Observability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:22", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Transparency goals", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:22", "target": "clause:openai_privacy:OpenAI system cards \u2014 model behavior transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:22", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:24", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:24", "target": "clause:google_saif:Core element \u2014 Adapt controls to adjust mitigations and crea", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:24", "target": "clause:iso_27701:5.7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:24", "target": "clause:iso_37301:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:24", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:24", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:24", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 compliance score and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:24", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:24", "target": "clause:nist_pf:GV.MT-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:24", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:24", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:24", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 pseudonymization an", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:google_saif:Secure-by-Default ML Tooling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:iso_27701:7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:microsoft_rai:Microsoft Purview Information Protection \u2014 classification an", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:nist_pf:GV.PO-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:25", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:google_saif:Insecure Integrated Component risk", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:iso_27701:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:iso_27701:8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:iso_27701:8.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:iso_27701:8.5.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:microsoft_rai:Microsoft Product Terms and Data Processing Agreement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:nist_pf:CT.PO-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:nist_pf:ID.DE-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:owasp_ai_exchange:segregatedata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:28", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:3", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:3", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 regulatory assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:3", "target": "clause:openai_privacy:OpenAI trust and compliance documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:3", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:google_saif:Model and Data Inventory Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:iso_27701:7.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:iso_27701:7.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:iso_27701:8.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:lgpd:37", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:microsoft_purview:Purview Audit (unified audit log)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:microsoft_rai:Microsoft EU Data Boundary and Jurisdiction-Specific DPAs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:microsoft_rai:Microsoft Purview Data Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:microsoft_rai:Microsoft Purview Data Map \u2014 lineage tracking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:nist_pf:ID.IM-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:nist_pf:ID.IM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:pipl:55", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:quebec_law25:3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:30", "target": "clause:uk_duaa:Data protection complaints procedure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:31", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:31", "target": "clause:iso_37301:9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:31", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:31", "target": "clause:okta_governance:Access Requests", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:31", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:31", "target": "clause:soc2:CC2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:google_saif:Core element \u2014 Expand strong security foundations to the AI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 output inspection a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:google_saif:Sensitive Data Disclosure risk \u2014 Output Validation and Sanit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:iso_27701:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:iso_27701:6.9.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:iso_37301:9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:microsoft_compliance:Compliance score monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:microsoft_rai:Azure encryption \u2014 at rest and in transit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 control evidence coll", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:microsoft_rai:Microsoft Purview Data Loss Prevention \u2014 generative AI app c", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:nist_csf:DE.CM-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:nist_pf:PR.DS-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:nist_pf:PR.DS-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:nist_pf:PR.DS-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:openai_privacy:OpenAI security practices \u2014 AES-256 at rest, TLS 1.2+ in tra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:32", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:iso_27701:6.13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:microsoft_rai:Microsoft Products and Services DPA \u2014 security incident noti", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:microsoft_rai:Microsoft Purview Insider Risk Management \u2014 risky data-handl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:nist_csf:RS.AN", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:nist_csf:RS.CO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:nist_pf:PR.DS-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:33", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:34", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:34", "target": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:34", "target": "clause:iso_27701:6.13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:34", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:34", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:34", "target": "clause:microsoft_rai:Microsoft Products and Services DPA \u2014 security incident noti", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:34", "target": "clause:nist_csf:RS.AN", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:34", "target": "clause:nist_csf:RS.CO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:34", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:34", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:35", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:35", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:35", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:35", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:35", "target": "clause:iso_37301:4.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:35", "target": "clause:iso_42001:4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:35", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:35", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:35", "target": "clause:microsoft_rai:Microsoft Responsible AI Impact Assessment template and guid", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:35", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Impact Assessment req", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:35", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:38", "target": "clause:iso_27701:5.7.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:38", "target": "clause:microsoft_rai:Microsoft Privacy Report \u2014 periodic privacy governance discl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:39", "target": "clause:iso_37301:7.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:39", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:39", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:4", "target": "clause:google_saif:Privacy Enhancing Technologies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:4", "target": "clause:nist_pf:CT.DP-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:4", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:42", "target": "clause:iso_27701:PIMS certification (standard as a whole)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:42", "target": "clause:microsoft_rai:Azure AI compliance certifications \u2014 ISO 27001, SOC 2, ISO 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:42", "target": "clause:nist_pf:GV.MT-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:42", "target": "clause:openai_privacy:OpenAI compliance certifications \u2014 SOC 2, ISO 27001, ISO 420", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:44", "target": "clause:iso_27701:7.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:44", "target": "clause:iso_27701:7.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:44", "target": "clause:microsoft_purview:Microsoft 365 Advanced Data Residency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:44", "target": "clause:nist_pf:GV.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:44", "target": "clause:nist_pf:GV.PO-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:44", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:46", "target": "clause:microsoft_rai:Microsoft data transfer documentation \u2014 customer TIA support", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:46", "target": "clause:microsoft_rai:Microsoft EU Data Boundary Commitment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:46", "target": "clause:nist_pf:ID.DE-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:46", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional storage options", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:46", "target": "clause:openai_privacy:OpenAI DPA and security documentation \u2014 customer transfer as", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:46", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:46", "target": "clause:uk_duaa:international transfer provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:46", "target": "clause:uk_duaa:TIA equivalent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:google_compliance:Certification documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:google_compliance:Compliance report", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:google_compliance:Regulatory guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:google_compliance:Shared responsibility matrix", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:google_dataplex:Auto Data Quality", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:google_saif:Inferred Sensitive Data risk \u2014 Training Data Management / Ou", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:google_saif:Training Data Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:google_saif:Unauthorized Training Data risk \u2014 Training Data Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:google_saif:User Data Management \u2014 mitigates Excessive Data Handling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:google_saif:User Data Management \u2014 telemetry and log data", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27001:A.5.33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27001:A.8.15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:5.8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:6.5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:6.9.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.3.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.4.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:7.4.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_27701:8.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_37301:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_37301:7.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_37301:9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_37301:9.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_37301:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_5259:5259-1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:iso_8000:8000-8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_compliance:Compliance score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_purview:Microsoft platform encryption in transit (TLS)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_purview:Microsoft Purview \u2014 Sensitive Information Types and DLP", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_purview:Purview Audit (unified audit log)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_rai:Azure AI certifications \u2014 ISO 27001, SOC 2, ISO 42001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence archive", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence collection a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_rai:Microsoft Purview Data Lifecycle Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction data governan", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 accountability and on", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:mitre:AML.M0000", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:mitre:AML.M0001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:ms_ifc_agents:Confidentiality label read-access list ({Alice, Bob, Charlie", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:ms_ifc_agents:Propagate labels \u2014 labels travel with derivative results as", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_csf:PR.DS-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:CT.DM-P4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:CT.DM-P7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:CT.DP-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:CT.DP-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:CT.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:CT.PO-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:GV.MT-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:GV.PO-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:ID.IM-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:ID.IM-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:ID.IM-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:PR.AC-P4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:PR.DS-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:nist_pf:PR.DS-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:okta_iam:Okta System Log \u2014 real-time audit events", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:okta_iam:Okta Workflows \u2014 event-driven lifecycle automation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:openai_privacy:OpenAI API data controls \u2014 retention and training configurat", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:openai_privacy:OpenAI API data retention policy \u2014 30-day default", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:openai_privacy:OpenAI API log retention \u2014 30-day abuse monitoring window", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:openai_privacy:OpenAI certifications \u2014 SOC 2, ISO 27001, ISO 42001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:openai_privacy:OpenAI privacy request records", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:openai_privacy:OpenAI usage policies \u2014 restricted inference uses", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:owasp_ai_exchange:discrete", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:owasp_ai_exchange:runtimemodeliointegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:owasp_ai_exchange:segregatedata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:soc2:CC2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:soc2:CC5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:5", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:6", "target": "clause:google_saif:Training Data Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:6", "target": "clause:iso_27701:7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:6", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:6", "target": "clause:nist_pf:ID.IM-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:6", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:7", "target": "clause:iso_27701:7.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:7", "target": "clause:nist_pf:CT.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:7", "target": "clause:okta_iam:Okta API Access Management \u2014 OAuth scopes and consent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:7", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 automated deprovisioning workflo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:7", "target": "clause:okta_iam:Okta real-time directory synchronization \u2014 consent state pro", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:7", "target": "clause:okta_iam:Okta Universal Directory \u2014 custom profile attributes for con", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:7", "target": "clause:openai_privacy:OpenAI API usage monitoring \u2014 data control configuration aud", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:7", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 customer content and train", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:7", "target": "clause:openai_privacy:OpenAI Enterprise Privacy \u2014 customer responsibility for lawf", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:7", "target": "clause:openai_privacy:OpenAI privacy request processing \u2014 data deletion", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:7", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:8", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:8", "target": "clause:uk_duaa:children provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:9", "target": "clause:google_saif:Google Cloud Sensitive Data Protection (Cloud DLP)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:9", "target": "clause:google_saif:Inferred Sensitive Data risk \u2014 Output Validation and Sanitiz", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:9", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:9", "target": "clause:microsoft_rai:Microsoft Purview Information Protection Classification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:9", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:9", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:9", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:9", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:Chapter V", "target": "clause:iso_27701:7.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:Chapter V", "target": "clause:nist_pf:GV.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:gdpr:Chapter V", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "target": "clause:iso_42001:6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "target": "clause:nist_rmf:GOVERN 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "target": "clause:oecd_ai_principles:Principle 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 alignment with wide", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 alignment with wide", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 alignment with wide", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 alignment with wide", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 alignment with wide", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 alignment with wide", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 alignment with wide", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ibm_ai_fairness:Bias metric selection (metric matched to task and fairness d", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ibm_ai_fairness:Bias mitigation algorithms (reweighing, adversarial debiasin", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ibm_ai_fairness:Fairness metrics (quantitative outcome indicators)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ibm_ai_fairness:Fairness metrics (vendor due-diligence benchmark)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ibm_ai_fairness:Fairness metrics and mitigation algorithms (training curricu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ieee_7000:\u00a710", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ieee_7000:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ieee_7000:\u00a76.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ieee_7000:\u00a77.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ieee_7000:\u00a79.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ieee_7000:Clause 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ieee_7000:Clause 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:ieee_7000:Clause 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_23894:4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_42001:4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_42001:5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_42001:7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_42001:7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms; Llama Acceptabl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document); Build trans", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:meta_llama_rai:Responsible Use Guide (provider guidance); Llama Acceptable", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:microsoft_rai:I1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:GOVERN 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:MEASURE 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:MEASURE 2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:nist_rmf:MEASURE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:oecd_ai_principles:Principle 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:openai_model_spec:Stay in bounds; Seek the truth together; Do the best work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:openai_model_spec:The chain of command", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:un_ethics_ai:\u00b635\u2013\u00b636 (Human oversight and determination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:un_ethics_ai:\u00b637 (Transparency)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:ibm_ai_fairness:Demographic parity difference and equalized odds difference", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:ibm_ai_fairness:Disaggregated (subgroup) performance metrics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:ibm_ai_fairness:Disparate impact metric", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:ibm_ai_fairness:Fairness metric computation (batch, schedulable on productio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:ibm_ai_fairness:Fairness metric suite (demographic parity difference, equali", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:ibm_ai_fairness:Protected attribute specification (privileged/unprivileged g", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:ibm_ai_fairness:Subgroup fairness metrics and bias mitigation algorithms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:ieee_7000:\u00a77.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:ieee_7000:Clause 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:ieee_7000:Clause 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibited", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:meta_llama_rai:Responsible AI considerations (fairness and inclusion)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:meta_llama_rai:System-level alignment \u2014 input/output mitigations; Llama Acc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:microsoft_rai:I1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:nist_rmf:MEASURE 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:ieee_7000:\u00a711", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:ieee_7000:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:ieee_7000:\u00a77", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:ieee_7000:\u00a79", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:ieee_7000:Clause 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:iso_42001:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibitio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:mitre:AML.M0021", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:mitre:AML.M0022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:nist_rmf:MAP 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:openai_model_spec:Stay in bounds (prohibited sexual content involving minors);", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:iso_27001:A.5.33", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:iso_27001:A.5.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:iso_37301:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:iso_37301:7.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:iso_37301:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:soc2:CC5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Certification documentation", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:iso_27001:A.5.23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:iso_37301:7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:iso_37301:9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:iso_37301:9.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:iso_37301:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:nist_csf:ID.AM-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:soc2:CC2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance report", "target": "clause:soc2:CC6.1, CC7.1, CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance Reports Manager", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance Reports Manager", "target": "clause:microsoft_compliance:Compliance Manager platform", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Compliance Reports Manager", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:FedRAMP High", "target": "clause:iso_27001:A.5.31", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:FedRAMP High", "target": "clause:microsoft_compliance:FedRAMP High & DoD IL5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:FedRAMP High", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:FedRAMP High", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:FedRAMP High", "target": "clause:openai_policies:Data residency commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Regulatory guidance", "target": "clause:iso_37301:4.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Regulatory guidance", "target": "clause:iso_37301:6.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Regulatory guidance", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Regulatory guidance", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Regulatory guidance", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Regulatory guidance", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Regulatory guidance", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Regulatory guidance", "target": "clause:nist_csf:GV.PO-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Regulatory guidance", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Regulatory guidance", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Regulatory guidance", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Regulatory guidance", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:iso_27001:A.8.15", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:iso_37301:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:iso_42001:4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:microsoft_compliance:Improvement Actions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:nist_csf:PR.DS-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:nist_csf:RS.AN", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:nist_csf:RS.CO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:soc2:CC1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_compliance:Shared responsibility matrix", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Auto Data Quality", "target": "clause:iso_8000:8000-8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Auto Data Quality", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Auto Data Quality", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:BigQuery schema management", "target": "clause:snowflake_horizon:Access History", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Cloud Storage \u2014 Object Integrity and Retention Lock", "target": "clause:iso_8000:8000-61", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Data Lineage API", "target": "clause:iso_8000:8000-120", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Data Lineage API", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Data Lineage API", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Data Lineage API", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Data Lineage API", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Dataplex Auto Data Quality (scheduled/batch scans)", "target": "clause:nist_pf:PR.DS-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Dataplex Auto Data Quality (scheduled/batch scans)", "target": "clause:owasp_ai_exchange:runtimemodeliointegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Dataplex Data Profile Scans", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Dataplex Data Profile Scans", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Dataplex Data Quality \u2014 Quality Rules", "target": "clause:iso_8000:8000-8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Dataplex Data Quality \u2014 Quality Rules", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_dataplex:Dataplex Data Quality \u2014 Quality Rules", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Cloud IAM", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Cloud IAM", "target": "clause:okta_financial:Okta access management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Cloud IAM", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Cloud IAM", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:pcaob_as_2201:\u00b6.20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:pcaob_as_2201:\u00b6.39", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:sec_ai:Proposed rule, Release 34-97990 (withdrawn 2025-06-12)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:sox:\u00a7302(a)(4)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Explainable AI", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:okta_financial:Okta Adaptive MFA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:omb_a_123:Section II.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:omb_a_123:Section IV.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:omb_a_123:Section VI.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:pcaob_as_2201:\u00b6.68-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:pcaob_as_2201:\u00b6.72-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:soc2:CC2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Google Cloud compliance offerings", "target": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:omb_a_123:Section II.B", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:pcaob_as_2201:\u00b6.39-.42", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:soc2:CC2.2 & CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Model Cards", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:omb_a_123:Section II.B", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:omb_a_123:Section III.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:omb_a_123:Section VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:pcaob_as_2201:\u00b6.39-.40", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:soc2:CC6.1, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:soc2:CC6.6, CC6.7, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:soc2:CC7.4, CC7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:soc2:PI1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:sox:\u00a7301", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:sox:\u00a7302(a)(5)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:sox:\u00a7404(a)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:sr26_2:\u00a7V (Outcomes Analysis)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Monitoring", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:occ_ai:Model Risk Management booklet (2021)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:okta_financial:Okta Privileged Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:omb_a_123:Section II.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:omb_a_123:Section III.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:pcaob_as_2201:\u00b6.14-.18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:pcaob_as_2201:\u00b6.62-.70", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:sr26_2:\u00a7V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:sr26_2:\u00a7V + \u00a7VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:sr26_2:\u00a7VI (Model Inventory)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_financial:Vertex AI Model Registry", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Compliance-Certified Service Rest", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Compliance-Certified Service Rest", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Compliance-Certified Service Rest", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Compliance-Certified Service Rest", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Continuous Regulatory Contract Co", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Continuous Regulatory Contract Co", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Regulatory Template C", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Continuous Regulatory Contract Co", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Data Sovereignty and Use Restrict", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Data Sovereignty and Use Restrict", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Data Sovereignty and Use Restrict", "target": "clause:microsoft_rai:Azure Policy + Microsoft Purview Data Governance \u2014 Automated", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Data Sovereignty and Use Restrict", "target": "clause:nist_800_53:AC-23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Regulatory Obligation Constraint", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Regulatory Obligation Constraint", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Regulatory Obligation Constraint", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Regulatory Obligation Constraint", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Regulatory Obligation Constraint", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Sovereign Compliance Conflict Det", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Sovereign Compliance Conflict Det", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Sovereign Compliance Conflict Det", "target": "clause:microsoft_rai:Microsoft Purview Compliance Solutions \u2014 Contractual Conflic", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Sovereign Compliance Conflict Det", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Assured Workloads \u2014 Sovereign Compliance Conflict Det", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Admin Activity Audit Logs \u2014 Procurement Event R", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Admin Activity Audit Logs \u2014 Procurement Event R", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Admin Activity Audit Logs \u2014 Procurement Event R", "target": "clause:nist_800_53:AU-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Admin Activity Audit Logs \u2014 Procurement Event R", "target": "clause:okta_authz:Okta System Log \u2014 Identity-Mediated Procurement Authorizatio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Admin Activity Audit Logs \u2014 Procurement Event R", "target": "clause:soc2:CC7.2 \u2014 Detection and Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Change Det", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Change Det", "target": "clause:microsoft_rai:Azure Machine Learning Model Monitoring \u2014 Knowledge Source S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Change Det", "target": "clause:nist_800_53:CM-3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Change Det", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Version Mo", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Version Mo", "target": "clause:microsoft_rai:Azure Machine Learning \u2014 Model and Data Version Tracking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Version Mo", "target": "clause:nist_800_53:CM-3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Version Mo", "target": "clause:nist_rmf:MAP 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory + Organization Policy \u2014 Ongoing", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory + Organization Policy \u2014 Ongoing", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory + Organization Policy \u2014 Ongoing", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Custom Assessments fo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory + Organization Policy \u2014 Ongoing", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory + Pub/Sub \u2014 Real-Time Policy Ch", "target": "clause:iso_37301:\u00a7 6.3 \u2014 Planning of changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory + Pub/Sub \u2014 Real-Time Policy Ch", "target": "clause:iso_42001:6.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory + Pub/Sub \u2014 Real-Time Policy Ch", "target": "clause:microsoft_rai:Azure Event Grid \u2014 AI Governance Policy Change Alerts", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory + Pub/Sub \u2014 Real-Time Policy Ch", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory + Pub/Sub \u2014 Real-Time Policy Ch", "target": "clause:okta_authz:Okta Event Hooks \u2014 Authorization Policy Change Notifications", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies \u2014 Constraint", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies \u2014 Constraint", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies \u2014 Constraint", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies + Policy Sim", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies + Policy Sim", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies + Policy Sim", "target": "clause:microsoft_rai:Azure Policy Compliance Dashboard \u2014 AI Workload Policy Adher", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies + Policy Sim", "target": "clause:nist_rmf:MEASURE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies + Policy Sim", "target": "clause:okta_authz:Okta System Log \u2014 Authorization Policy Adherence Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Immutable Approval Event Records", "target": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Immutable Approval Event Records", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Unified AI Authorization Audit Tra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Immutable Approval Event Records", "target": "clause:nist_800_53:AU-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Immutable Approval Event Records", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Authorization Decision Reco", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Immutable Approval Event Records", "target": "clause:soc2:CC7.2 \u2014 The entity monitors system components for anomalies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Non-Repudiable Principal Binding", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Non-Repudiable Principal Binding", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Principal Accountability for AI Ac", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Non-Repudiable Principal Binding", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Non-Repudiable Principal Binding", "target": "clause:okta_authz:Okta Identity Tokens \u2014 Principal Identity Binding for AI Age", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs + Policy Analyzer \u2014 Internal Audit E", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs + Policy Analyzer \u2014 Internal Audit E", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs + Policy Analyzer \u2014 Internal Audit E", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Structured Internal A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs + Policy Analyzer \u2014 Internal Audit E", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs + Policy Analyzer \u2014 Internal Audit E", "target": "clause:okta_authz:Okta System Log Compliance Reports \u2014 Authorization Audit Evi", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Audit Logs + Policy Analyzer \u2014 Internal Audit E", "target": "clause:soc2:CC4.1 \u2014 COSO Principle 16 \u2014 ongoing and/or separate evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Custom Org Policy \u2014 Governance Program Coverage", "target": "clause:iso_37301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Custom Org Policy \u2014 Governance Program Coverage", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Custom Org Policy \u2014 Governance Program Coverage", "target": "clause:microsoft_rai:Microsoft RAI Red Team Operations \u2014 Independent Program Asse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Custom Org Policy \u2014 Governance Program Coverage", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Custom Org Policy \u2014 Governance Program Coverage", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud IAM Recommender \u2014 Least-Privilege Policy Improv", "target": "clause:iso_37301:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud IAM Recommender \u2014 Least-Privilege Policy Improv", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud IAM Recommender \u2014 Least-Privilege Policy Improv", "target": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report \u2014 Systematic Le", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud IAM Recommender \u2014 Least-Privilege Policy Improv", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud IAM Resource Hierarchy \u2014 Inherited Authority Li", "target": "clause:iso_37301:\u00a7 7.2 \u2014 Competence", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud IAM Resource Hierarchy \u2014 Inherited Authority Li", "target": "clause:iso_42001:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud IAM Resource Hierarchy \u2014 Inherited Authority Li", "target": "clause:microsoft_rai:Azure RBAC \u2014 Authority Delegation Hierarchy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud IAM Resource Hierarchy \u2014 Inherited Authority Li", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud IAM Resource Hierarchy \u2014 Inherited Authority Li", "target": "clause:okta_authz:Okta Authorization Server \u2014 OAuth 2.0 Delegation Constraints", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Marketplace + Org Policy \u2014 Approved AI Service", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Marketplace + Org Policy \u2014 Approved AI Service", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Marketplace + Org Policy \u2014 Approved AI Service", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Org Policy \u2014 Third-Party Integration Restrictio", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Org Policy \u2014 Third-Party Integration Restrictio", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Org Policy \u2014 Third-Party Integration Restrictio", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Org Policy \u2014 Third-Party Integration Restrictio", "target": "clause:oecd_cg:II.F / IV.A \u2014 Related party transactions \u2014 approval and disc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Managed Constraint Compli", "target": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Managed Constraint Compli", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Managed Constraint Compli", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Managed Constraint Compli", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Managed Constraint Compli", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Ongoing Evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Policy Simulation for Con", "target": "clause:iso_42001:6.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Policy Simulation for Con", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Policy Simulation for Con", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Resource Constraint Enfor", "target": "clause:iso_42001:6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Resource Constraint Enfor", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Resource Constraint Enfor", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Model Deployment Restriction and Content S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Resource Constraint Enfor", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Service Usage Restriction", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Service Usage Restriction", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Service Usage Restriction", "target": "clause:microsoft_rai:Microsoft Purview \u2014 Data Governance for AI Knowledge Sources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Service Usage Restriction", "target": "clause:nist_rmf:MAP 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Service Usage Restriction", "target": "clause:okta_authz:Okta Fine-Grained Authorization \u2014 Knowledge Resource Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy + Cloud Asset Inventory \u2014 G", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy + Cloud Asset Inventory \u2014 G", "target": "clause:microsoft_rai:Microsoft Purview + Azure Policy Compliance Reports \u2014 AI Gov", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy + Cloud Asset Inventory \u2014 G", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (oversight, acc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Dry-Run \u2014 Safe Policy Versi", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Dry-Run \u2014 Safe Policy Versi", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Dry-Run \u2014 Safe Policy Versi", "target": "clause:microsoft_rai:Azure Resource Manager Policy Versioning \u2014 Automated Policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Dry-Run \u2014 Safe Policy Versi", "target": "clause:nist_800_53:CM-3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Dry-Run \u2014 Safe Policy Versi", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Monitoring \u2014 Authority Boun", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Monitoring \u2014 Authority Boun", "target": "clause:microsoft_rai:Microsoft Defender for Cloud \u2014 AI Workload Posture and Threa", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Monitoring \u2014 Authority Boun", "target": "clause:nist_800_53:AU-6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Monitoring \u2014 Authority Boun", "target": "clause:nist_rmf:MEASURE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Monitoring \u2014 Authority Boun", "target": "clause:okta_authz:Okta System Log + Identity Governance Reports \u2014 Authority Li", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Service \u2014 Centralized Machi", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Service \u2014 Centralized Machi", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Service \u2014 Centralized Machi", "target": "clause:microsoft_rai:Azure Policy Initiative Assignments \u2014 AI Policy Register Imp", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Service \u2014 Centralized Machi", "target": "clause:nist_800_53:PL-1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Service \u2014 Centralized Machi", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Organization Policy Service \u2014 Centralized Machi", "target": "clause:opa_rego:OPA Policy Language documentation (Rego)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud PAM Emergency Access \u2014 Justified Time-Bounded B", "target": "clause:iso_37301:\u00a7 4.6 \u2014 Compliance risk assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud PAM Emergency Access \u2014 Justified Time-Bounded B", "target": "clause:microsoft_rai:Azure PIM Emergency Access \u2014 Governed Break-Glass Activation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud PAM Emergency Access \u2014 Justified Time-Bounded B", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud PAM Emergency Access \u2014 Justified Time-Bounded B", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud PAM Emergency Access \u2014 Justified Time-Bounded B", "target": "clause:okta_authz:Okta Privileged Access + Okta Workflows \u2014 Emergency Override", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud PAM Multi-Level Approval \u2014 Dual-Authorization W", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud PAM Multi-Level Approval \u2014 Dual-Authorization W", "target": "clause:microsoft_rai:Azure DevOps Required Reviewers \u2014 Multi-Party AI Deployment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud PAM Multi-Level Approval \u2014 Dual-Authorization W", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud PAM Multi-Level Approval \u2014 Dual-Authorization W", "target": "clause:okta_authz:Okta Workflows \u2014 Multi-Party Token Approval Chains", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Approval-Gated Elev", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Approval-Gated Elev", "target": "clause:microsoft_rai:Azure Policy Custom Definitions \u2014 AI Action Approval Thresho", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Approval-Gated Elev", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Approval-Gated Elev", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Approval-Gated Elev", "target": "clause:okta_authz:Okta Authorization Server \u2014 Time-Bounded Approval-Scoped Tok", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Multi-Level Approva", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Multi-Level Approva", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Multi-Level Approva", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Multi-Level Approva", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Multi-Level Approva", "target": "clause:okta_authz:Okta Workflows \u2014 Automated Escalation Gate Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Cross-Domain Evidence", "target": "clause:iso_37301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Cross-Domain Evidence", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Cross-Domain Evidence", "target": "clause:microsoft_rai:Microsoft Defender for Cloud + Purview \u2014 Cross-Domain Policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Cross-Domain Evidence", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Policy Violation Tria", "target": "clause:iso_37301:8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Policy Violation Tria", "target": "clause:microsoft_rai:Microsoft Sentinel \u2014 AI Policy Incident Classification and S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Policy Violation Tria", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Policy Violation Tria", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Security Foundations Blueprint \u2014 Pre-Deployment", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Security Foundations Blueprint \u2014 Pre-Deployment", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Security Foundations Blueprint \u2014 Pre-Deployment", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Security Foundations Blueprint \u2014 Pre-Deployment", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud Security Foundations Blueprint \u2014 Pre-Deployment", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud SLA Terms + Assured Workloads \u2014 Commitment Enfo", "target": "clause:iso_37301:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud SLA Terms + Assured Workloads \u2014 Commitment Enfo", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud SLA Terms + Assured Workloads \u2014 Commitment Enfo", "target": "clause:microsoft_rai:Azure SLA + Azure Monitor \u2014 SLA Commitment Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud SLA Terms + Assured Workloads \u2014 Commitment Enfo", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Cloud SLA Terms + Assured Workloads \u2014 Commitment Enfo", "target": "clause:soc2:A1.1 \u2014 Capacity management and monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Gemini Enterprise Agent Platform \u2014 Agent Access Contr", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Gemini Enterprise Agent Platform \u2014 Agent Access Contr", "target": "clause:nist_800_53:SI-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Gemini Enterprise Agent Platform \u2014 Agent Access Contr", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Gemini Enterprise Agent Platform \u2014 Agent Access Contr", "target": "clause:okta_authz:Okta for AI Agents \u2014 Scoped Token Authorization", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_org_policy:Google Gemini Enterprise Agent Platform \u2014 Agent Access Contr", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Research Categories (Long-Range", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Transparency goals", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability", "target": "clause:openai_privacy:OpenAI system cards \u2014 model behavior transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:iso_31000:6.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:mitre_atlas:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Sandbagging and Long-range Auto", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Observability (SAIF control)", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:iso_42001:6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:mitre_atlas:AML.T0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:nist_ai_600_1:MS-2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:nist_rmf:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:nist_rmf:MANAGE 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:nist_rmf:MANAGE 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:nist_rmf:MANAGE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy and Autonom", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent Permissions (SAIF control)", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:iso_31000:6.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Agent User Control (SAIF control)", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Adapt controls to adjust mitigations and crea", "target": "clause:iso_27701:5.7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Adapt controls to adjust mitigations and crea", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 compliance score and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Adapt controls to adjust mitigations and crea", "target": "clause:nist_pf:GV.MT-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 regulatory assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "target": "clause:microsoft_rai:Microsoft Responsible AI Impact Assessment template and guid", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Impact Assessment req", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "target": "clause:openai_privacy:OpenAI trust and compliance documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Expand strong security foundations to the AI", "target": "clause:iso_27701:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Expand strong security foundations to the AI", "target": "clause:microsoft_rai:Azure encryption \u2014 at rest and in transit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Expand strong security foundations to the AI", "target": "clause:nist_pf:PR.DS-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Expand strong security foundations to the AI", "target": "clause:nist_pf:PR.DS-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Expand strong security foundations to the AI", "target": "clause:openai_privacy:OpenAI security practices \u2014 AES-256 at rest, TLS 1.2+ in tra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "target": "clause:iso_27701:6.13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "target": "clause:microsoft_rai:Microsoft Products and Services DPA \u2014 security incident noti", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "target": "clause:microsoft_rai:Microsoft Purview Insider Risk Management \u2014 risky data-handl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "target": "clause:nist_pf:PR.DS-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:iso_42001:7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:mitre_atlas:AML.T0010", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:mitre_atlas:AML.T0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:nist_rmf:GOVERN 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:owasp_aisvs:C9.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:mitre_atlas:AML.T0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:mitre_atlas:AML.T0040", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:nist_ai_600_1:MS-2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:nist_rmf:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:nist_rmf:GOVERN 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:nist_rmf:MEASURE 2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "target": "clause:salesforce_trust:Toxicity detection \u2014 output scoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:iso_31000:6.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:nist_ai_600_1:2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:nist_rmf:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "target": "clause:salesforce_trust:Secure data retrieval, dynamic grounding, and toxicity detec", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:iso_31000:6.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:iso_31000:6.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:iso_42001:4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:mitre:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:nist_rmf:MANAGE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:iso_31000:6.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:microsoft_rai:PS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:nist_rmf:GOVERN 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:openai_preparedness:Building trust (\u00a75) \u2014 framework iteration and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "target": "clause:salesforce_trust:Data masking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "target": "clause:iso_31000:6.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "target": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "target": "clause:owasp_aivss:AIVSS-AARS", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Admin Activity", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Admin Activity", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Admin Activity", "target": "clause:nist_zt:Tenet 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Logs", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Logs", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Logs", "target": "clause:nist_zt:Tenet 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Audit Logs \u2014 Organization Log Sink", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Audit Logs \u2014 Organization Log Sink", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Audit Logs \u2014 Organization Log Sink", "target": "clause:nist_zt:Tenet 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud IAM \u2014 Dedicated Service Accounts", "target": "clause:iso_24760:7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud IAM \u2014 Dedicated Service Accounts", "target": "clause:nist_800_63:SP 800-63-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud IAM \u2014 Dedicated Service Accounts", "target": "clause:okta_iam:Okta Universal Directory \u2014 Human NHI Separation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud IAM \u2014 HSM Service Account Keys", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73.1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud IAM Best Practices \u2014 Least Privilege Roles", "target": "clause:nist_800_63:SP 800-63B-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud IAM Best Practices \u2014 Least Privilege Roles", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud IAM Best Practices \u2014 Least Privilege Roles", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud IAM Best Practices \u2014 Least Privilege Roles", "target": "clause:okta_iam:Okta for AI Agents \u2014 Minimum Privilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud IAM Best Practices \u2014 Least Privilege Roles", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Secret Manager \u2014 Credential Hygiene", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Secret Manager \u2014 Credential Hygiene", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Secret Manager \u2014 Credential Hygiene", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 de-identification A", "target": "clause:iso_27701:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 de-identification A", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 account deactivation and deletio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 de-identification A", "target": "clause:openai_privacy:OpenAI data deletion controls", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 output inspection a", "target": "clause:microsoft_rai:Microsoft Purview Data Loss Prevention \u2014 generative AI app c", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 output inspection a", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 output inspection a", "target": "clause:nist_pf:PR.DS-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 output inspection a", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 pseudonymization an", "target": "clause:iso_27701:7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 pseudonymization an", "target": "clause:microsoft_rai:Microsoft Purview Information Protection \u2014 classification an", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 pseudonymization an", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Sensitive Data Protection (Cloud DLP)", "target": "clause:microsoft_rai:Microsoft Purview Information Protection Classification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Sensitive Data Protection (Cloud DLP)", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud WIF \u2014 External OIDC Verification", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud WIF \u2014 External OIDC Verification", "target": "clause:ping_identity:PingOne Credentials \u2014 W3C Verifiable Credentials / DID", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud WIF \u2014 External OIDC Verification", "target": "clause:w3c_did:\u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud WIF \u2014 External OIDC Verification", "target": "clause:w3c_did:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud WIF \u2014 STS Token Exchange", "target": "clause:nist_800_63:SP 800-63B-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud WIF \u2014 STS Token Exchange", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud WIF \u2014 STS Token Exchange", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud WIF \u2014 STS Token Exchange", "target": "clause:okta_iam:Okta Cross App Access \u2014 Identity Assertion Authorization Gra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud WIF \u2014 STS Token Exchange", "target": "clause:openid:RFC 9396 \u00a76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Keyless Authenti", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Keyless Authenti", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Keyless Authenti", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Keyless Authenti", "target": "clause:ping_identity:PingOne Credentials \u2014 Verifiable Credentials", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Short Lived Toke", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Short Lived Toke", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Short Lived Toke", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google SAIF \u2014 Expand strong security foundations (least-priv", "target": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google SAIF \u2014 Expand strong security foundations (least-priv", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google SAIF \u2014 Expand strong security foundations (least-priv", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google SAIF \u2014 Expand strong security foundations (least-priv", "target": "clause:okta_iam:Okta for AI Agents \u2014 Assurance Levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google SAIF \u2014 Extend detection and response to AI (behaviora", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google SAIF \u2014 Extend detection and response to AI (behaviora", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google SAIF \u2014 Extend detection and response to AI (behaviora", "target": "clause:nist_zt:Tenet 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google SAIF \u2014 Extend detection and response to AI (behaviora", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Machine Identity Baseline", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Security Command Center \u2014 privilege escalation detect", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Security Command Center \u2014 privilege escalation detect", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Security Command Center \u2014 privilege escalation detect", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Security Command Center \u2014 Threat Detection", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Security Command Center \u2014 Threat Detection", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Security Command Center \u2014 Threat Detection", "target": "clause:nist_zt:Tenet 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Google Security Command Center \u2014 Threat Detection", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Anomalous Auth Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Incident Response Management (SAIF control)", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Incident Response Management (SAIF control)", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Incident Response Management (SAIF control)", "target": "clause:mitre_atlas:ATLAS tactics and techniques (framework-wide)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Incident Response Management (SAIF control)", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Inferred Sensitive Data risk \u2014 Output Validation and Sanitiz", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Inferred Sensitive Data risk \u2014 Output Validation and Sanitiz", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Inferred Sensitive Data risk \u2014 Output Validation and Sanitiz", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Inferred Sensitive Data risk \u2014 Output Validation and Sanitiz", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Inferred Sensitive Data risk \u2014 Training Data Management / Ou", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Inferred Sensitive Data risk \u2014 Training Data Management / Ou", "target": "clause:nist_pf:CT.DP-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Inferred Sensitive Data risk \u2014 Training Data Management / Ou", "target": "clause:openai_privacy:OpenAI usage policies \u2014 restricted inference uses", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Inferred Sensitive Data risk \u2014 Training Data Management / Ou", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:nist_ai_600_1:2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:owasp_ai_exchange:anomalousinputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Insecure Integrated Component risk", "target": "clause:iso_27701:8.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Insecure Integrated Component risk", "target": "clause:iso_27701:8.5.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Insecure Integrated Component risk", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Insecure Integrated Component risk", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Insecure Integrated Component risk", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Insecure Integrated Component risk", "target": "clause:nist_pf:ID.DE-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Insecure Integrated Component risk", "target": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Insecure Integrated Component risk", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Model and Data Inventory Management", "target": "clause:iso_27701:7.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Model and Data Inventory Management", "target": "clause:iso_27701:7.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Model and Data Inventory Management", "target": "clause:lgpd:37", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Model and Data Inventory Management", "target": "clause:microsoft_rai:Microsoft Purview Data Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Model and Data Inventory Management", "target": "clause:microsoft_rai:Microsoft Purview Data Map \u2014 lineage tracking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Model and Data Inventory Management", "target": "clause:nist_pf:ID.IM-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Model and Data Inventory Management", "target": "clause:nist_pf:ID.IM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Model and Data Inventory Management", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Model and Data Inventory Management", "target": "clause:pipl:55", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Model and Data Inventory Management", "target": "clause:quebec_law25:3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Privacy Enhancing Technologies", "target": "clause:nist_pf:CT.DP-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Privacy Enhancing Technologies", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Secure-by-Default ML Tooling", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Secure-by-Default ML Tooling", "target": "clause:nist_pf:GV.PO-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Sensitive Data Disclosure risk \u2014 Output Validation and Sanit", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Sensitive Data Disclosure risk \u2014 Output Validation and Sanit", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Sensitive Data Disclosure risk \u2014 Output Validation and Sanit", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Sensitive Data Disclosure risk \u2014 Output Validation and Sanit", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Training Data Management", "target": "clause:iso_27701:7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Training Data Management", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Training Data Management", "target": "clause:nist_pf:ID.IM-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Training Data Management", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Training Data Management \u2014 provenance and lineage", "target": "clause:okta_iam:Okta scoped administrator roles \u2014 least-privilege data expor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Training Data Management \u2014 provenance and lineage", "target": "clause:openai_privacy:OpenAI privacy request fulfillment \u2014 personal data access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Training Data Management \u2014 provenance and lineage", "target": "clause:uk_duaa:access rights provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Unauthorized Training Data risk \u2014 Training Data Management", "target": "clause:iso_27701:7.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Unauthorized Training Data risk \u2014 Training Data Management", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 accountability and on", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Unauthorized Training Data risk \u2014 Training Data Management", "target": "clause:nist_pf:GV.MT-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:Unauthorized Training Data risk \u2014 Training Data Management", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:User Data Management \u2014 mitigates Excessive Data Handling", "target": "clause:iso_27701:7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:User Data Management \u2014 mitigates Excessive Data Handling", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:User Data Management \u2014 mitigates Excessive Data Handling", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:User Data Management \u2014 mitigates Excessive Data Handling", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:User Data Management \u2014 telemetry and log data", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction data governan", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:User Data Management \u2014 telemetry and log data", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:User Data Management \u2014 telemetry and log data", "target": "clause:openai_privacy:OpenAI API log retention \u2014 30-day abuse monitoring window", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_saif:User Data Management \u2014 telemetry and log data", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Cascading failure prevention", "target": "clause:iso_22301:8.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Cascading failure prevention", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Geo-redundancy and failover configura", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Cascading failure prevention", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Cascading failure prevention", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven availability changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 14", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 14", "target": "clause:microsoft_azure_resil:Failover configuration \u2014 Return-to-service validation and pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 14", "target": "clause:nist_csf:RC.RP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 2", "target": "clause:microsoft_azure_resil:Azure Resiliency \u2014 Availability zone design and geo-redundan", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 2", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 2", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 21", "target": "clause:microsoft_azure_resil:Bulkhead pattern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 21", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 22", "target": "clause:iso_22301:8.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 22", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 22", "target": "clause:microsoft_azure_resil:BCDR \u2013 Chaos testing and resilience validation (Azure Chaos", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 22", "target": "clause:microsoft_azure_resil:BCDR \u2013 Graceful degradation design and availability zone fai", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 22", "target": "clause:microsoft_azure_resil:Circuit Breaker Pattern \u2014 Azure Architecture Center", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 22", "target": "clause:nist_800_160_v2:\u00a72.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 22", "target": "clause:nist_800_160_v2:\u00a72.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 22", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 22", "target": "clause:nist_csf:ID.IM-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 22", "target": "clause:nist_csf:PR.IR-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 22", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 22", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 22", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 26", "target": "clause:iso_22301:8.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 26", "target": "clause:microsoft_azure_resil:Durable Functions checkpoint", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 26", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 3", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 3", "target": "clause:microsoft_azure_resil:Azure Resiliency \u2014 Availability zone design and geo-redundan", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 3", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 BCDR design guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 3", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 3", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 3", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 3", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 32", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Design lifecycle integration: BCDR", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 32", "target": "clause:nist_800_160_v2:\u00a72.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 32", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 33", "target": "clause:iso_22301:8.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 33", "target": "clause:nist_800_160_v2:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 8", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Deployment rollback and blue-green re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 8", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 8", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Ch. 8", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Disaster Recovery Testing (DiRT) and game days", "target": "clause:iso_22301:8.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Disaster Recovery Testing (DiRT) and game days", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Disaster Recovery Testing (DiRT) and game days", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Testing and validation program", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Disaster Recovery Testing (DiRT) and game days", "target": "clause:nist_csf:ID.IM-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Disaster Recovery Testing (DiRT) and game days", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Error budget policies", "target": "clause:iso_22301:6.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Error budget policies", "target": "clause:microsoft_azure_resil:BCDR design guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Error budget policies", "target": "clause:nist_csf:GV.PO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Error budget policies", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Error budget policies \u2013 Multi-region SLO maintenance and fai", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Error budget policies \u2013 Multi-region SLO maintenance and fai", "target": "clause:microsoft_azure_resil:RE:05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Error budget policies \u2013 Multi-region SLO maintenance and fai", "target": "clause:nist_csf:PR.IR-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Error budget policies \u2014 Service tier definition by SLO", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Error budget policies \u2014 Service tier definition by SLO", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 Business continuity tiering by service", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Error budget policies \u2014 Service tier definition by SLO", "target": "clause:nist_800_160_v2:Appendix D", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Error budget policies \u2014 Service tier definition by SLO", "target": "clause:nist_csf:ID.AM-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Error budget policies \u2014 Service tier definition by SLO", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Error budget policies \u2014 Service tier definition by SLO", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical capability levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Incident management, postmortem practices, and", "target": "clause:iso_22301:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Incident management, postmortem practices, and", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 design guidance for regulated work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Incident management, postmortem practices, and", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Postmortem practices and error budget policies:", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Postmortem practices and error budget policies:", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Geo-redundant storage design, Azur", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Postmortem practices and error budget policies:", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Postmortem practices and error budget policies:", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Postmortem practices and production readiness r", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Postmortem practices and production readiness r", "target": "clause:iso_27031:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Postmortem practices and production readiness r", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 BCDR documentation, failover test", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Postmortem practices and production readiness r", "target": "clause:nist_csf:ID.IM-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Postmortem practices and production readiness r", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Production readiness review and change manageme", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 infrastructure-as-code recovery (A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Production readiness review and change manageme", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Google SRE \u2014 Production readiness review and change manageme", "target": "clause:nist_sp800_34:\u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management \u2014 Incident Commander role and structured", "target": "clause:iso_22301:8.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management \u2014 Incident Commander role and structured", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management \u2014 Incident Commander role and structured", "target": "clause:microsoft_azure_resil:Business continuity planning \u2014 Communication procedures and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management \u2014 Incident Commander role and structured", "target": "clause:nist_sp800_34:\u00a74.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management \u2014 Verification of data consistency befor", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management \u2014 Verification of data consistency befor", "target": "clause:microsoft_azure_resil:BCDR \u2014 Data backup, geo-redundant recovery, and RPO verifica", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management \u2014 Verification of data consistency befor", "target": "clause:nist_csf:RC.RP-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management \u2014 Verification of data consistency befor", "target": "clause:nist_sp800_34:\u00a73.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management and postmortem practices", "target": "clause:iso_22301:8.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management and postmortem practices", "target": "clause:microsoft_azure_resil:Failover configuration and recovery objectives", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management and postmortem practices", "target": "clause:nist_csf:RC.RP", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management and postmortem practices", "target": "clause:nist_sp800_34:\u00a74.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management and Production Readiness Review", "target": "clause:iso_22301:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management and Production Readiness Review", "target": "clause:iso_27031:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management and Production Readiness Review", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery objectives and failover conf", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management and Production Readiness Review", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Incident management and Production Readiness Review", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem Culture \u2013 Blameless postmortems with tracked acti", "target": "clause:iso_22301:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem Culture \u2013 Blameless postmortems with tracked acti", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem Culture \u2013 Blameless postmortems with tracked acti", "target": "clause:microsoft_azure_resil:BCDR \u2013 Post-incident review and recovery objective validatio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem Culture \u2013 Blameless postmortems with tracked acti", "target": "clause:nist_csf:ID.IM-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem Culture \u2013 Blameless postmortems with tracked acti", "target": "clause:nist_sp800_34:\u00a74.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem practices \u2014 Structured incident report with timel", "target": "clause:iso_22301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem practices \u2014 Structured incident report with timel", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem practices \u2014 Structured incident report with timel", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Post-recovery documentation and compl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem practices \u2014 Structured incident report with timel", "target": "clause:nist_csf:ID.IM-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem practices \u2014 Structured incident report with timel", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem practices \u2014 Timestamped action log and incident t", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem practices \u2014 Timestamped action log and incident t", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery documentation and activity l", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem practices \u2014 Timestamped action log and incident t", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem practices and PRR \u2013 Resilience evidence from SRE", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem practices and PRR \u2013 Resilience evidence from SRE", "target": "clause:microsoft_azure_resil:Business continuity planning \u2013 BCDR evidence documentation a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem practices and PRR \u2013 Resilience evidence from SRE", "target": "clause:nist_csf:GV.RR-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Postmortem practices and PRR \u2013 Resilience evidence from SRE", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review", "target": "clause:iso_22301:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review", "target": "clause:iso_22301:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review", "target": "clause:iso_27031:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review", "target": "clause:microsoft_azure_resil:Business continuity planning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review", "target": "clause:nist_800_160_v2:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review", "target": "clause:nist_csf:GV.OV-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review", "target": "clause:nist_csf:GV.RR", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a75.1 Internal governanc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2013 Reliability and resilience con", "target": "clause:iso_22301:8.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2013 Reliability and resilience con", "target": "clause:microsoft_azure_resil:BCDR \u2013 Testing and validation of failover and recovery contr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2013 Reliability and resilience con", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2013 Reliability and resilience con", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2013 Third-party dependency resilie", "target": "clause:iso_22301:8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2013 Third-party dependency resilie", "target": "clause:microsoft_azure_resil:BCDR \u2013 Third-party service dependency continuity planning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2013 Third-party dependency resilie", "target": "clause:nist_csf:GV.SC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2013 Third-party dependency resilie", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review \u2014 Availability requirements", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review \u2014 Availability requirements", "target": "clause:iso_27031:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review \u2014 Availability requirements", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Business continuity planning methodol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review \u2014 Availability requirements", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review \u2014 Availability requirements", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review \u2014 Availability requirements", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2014 Data infrastructure recovery r", "target": "clause:iso_22301:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2014 Data infrastructure recovery r", "target": "clause:microsoft_azure_resil:RE:09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2014 Data infrastructure recovery r", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2014 Data infrastructure recovery r", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2014 Failover procedures and incide", "target": "clause:iso_22301:8.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2014 Failover procedures and incide", "target": "clause:microsoft_azure_resil:BCDR \u2014 Failover configuration and availability zone design", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2014 Failover procedures and incide", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2014 Failover procedures and incide", "target": "clause:nist_sp800_34:\u00a73.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2014 Rollback readiness criteria", "target": "clause:microsoft_azure_resil:Failover configuration \u2014 Blue/green deployment and deploymen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2014 Rollback readiness criteria", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2014 Rollback readiness criteria", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production Readiness Review \u2014 Rollback readiness criteria", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard decisions affecting deployed mod", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review: fault tolerance criteria", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review: fault tolerance criteria", "target": "clause:microsoft_azure_resil:BCDR documentation: fault tolerance evidence", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review: fault tolerance criteria", "target": "clause:nist_csf:GV.OC-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Production readiness review: fault tolerance criteria", "target": "clause:nist_sp800_34:\u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:SLO management \u2014 Error budget consumption and SLA breach det", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:SLO management \u2014 Error budget consumption and SLA breach det", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 RTO/RPO measurement and BCDR complianc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:SLO management \u2014 Error budget consumption and SLA breach det", "target": "clause:nist_csf:ID.IM-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:SLO management \u2014 Error budget consumption and SLA breach det", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:SLO/Error Budget Policy \u2013 Defining and enforcing availabilit", "target": "clause:iso_22301:8.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:SLO/Error Budget Policy \u2013 Defining and enforcing availabilit", "target": "clause:microsoft_azure_resil:BCDR \u2013 Recovery objectives (RTO/RPO) definition and validati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:SLO/Error Budget Policy \u2013 Defining and enforcing availabilit", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:SLO/Error Budget Policy \u2013 Defining and enforcing availabilit", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:SLO/SLA management and error budget policies", "target": "clause:iso_22301:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:SLO/SLA management and error budget policies", "target": "clause:nist_csf:GV.OV-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:SLO/SLA management and error budget policies", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:SLO/SLA management and error budget policies", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Capabilities and Safeguards Repor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Toil reduction and on-call practices", "target": "clause:iso_22301:7.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Toil reduction and on-call practices", "target": "clause:nist_csf:GV.SC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_sre:Toil reduction and on-call practices", "target": "clause:nist_sp800_34:\u00a72.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Check Grounding API", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Grounded generation \u2014 grounding support scores", "target": "clause:iso_30401:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Grounded generation \u2014 grounding support scores", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Grounded generation \u2014 grounding support scores", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Grounded generation \u2014 grounding supports and citations", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Grounding \u2014 Data Source Configuration", "target": "clause:iso_30401:4.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Grounding and Citation APIs", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Grounding and Citation APIs", "target": "clause:w3c_prov:\u00a75.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Grounding citations and source attribution", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Grounding citations and source attribution", "target": "clause:w3c_prov:\u00a75.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:RAG grounding quality configuration", "target": "clause:iso_30401:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:RAG grounding quality configuration", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:RAG grounding quality configuration", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Vertex AI RAG \u2014 metadata filters at query time", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Vertex AI RAG Engine \u2014 retrieval telemetry and evaluation", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Vertex AI RAG Engine \u2014 retrieval telemetry and evaluation", "target": "clause:itil_4:\u00a75.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:google_vertex_rag:Vertex AI RAG Engine \u2014 retrieval telemetry and evaluation", "target": "clause:microsoft_azure_ai:Azure AI Search \u2014 monitoring and search traffic analytics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias metric selection (metric matched to task and fairness d", "target": "clause:ieee_7000:Clause 11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias metric selection (metric matched to task and fairness d", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias metric selection (metric matched to task and fairness d", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias metric selection (metric matched to task and fairness d", "target": "clause:nist_rmf:MEASURE 2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias metric selection (metric matched to task and fairness d", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias metric selection (metric matched to task and fairness d", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias metric selection (metric matched to task and fairness d", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms (reweighing, adversarial debiasin", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms (reweighing, adversarial debiasin", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms; Llama Acceptabl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms (reweighing, adversarial debiasin", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms (reweighing, adversarial debiasin", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "target": "clause:ieee_7000:\u00a711", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "target": "clause:ieee_7000:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "target": "clause:iso_42001:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "target": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "target": "clause:mitre:AML.M0021", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "target": "clause:mitre:AML.M0022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "target": "clause:nist_rmf:MAP 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Dataset and classifier fairness metrics", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Dataset and classifier fairness metrics", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Dataset and classifier fairness metrics", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Dataset and classifier fairness metrics", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Dataset and classifier fairness metrics", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Dataset and classifier fairness metrics", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Dataset and classifier fairness metrics", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Demographic parity difference and equalized odds difference", "target": "clause:ieee_7000:Clause 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Demographic parity difference and equalized odds difference", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibited", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Demographic parity difference and equalized odds difference", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Demographic parity difference and equalized odds difference", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Demographic parity difference and equalized odds difference", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disaggregated (subgroup) performance metrics", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disaggregated (subgroup) performance metrics", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disaggregated (subgroup) performance metrics", "target": "clause:nist_rmf:MEASURE 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disaggregated (subgroup) performance metrics", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disparate impact metric", "target": "clause:ieee_7000:Clause 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disparate impact metric", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disparate impact metric", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disparate impact metric", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disparate impact metric", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disparate impact metric", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disparate impact metric", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disparate impact metric (four-fifths rule)", "target": "clause:ieee_7000:Clause 9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disparate impact metric (four-fifths rule)", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disparate impact metric (four-fifths rule)", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Disparate impact metric (four-fifths rule)", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric computation (batch, schedulable on productio", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric computation (batch, schedulable on productio", "target": "clause:meta_llama_rai:System-level alignment \u2014 input/output mitigations; Llama Acc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric computation (batch, schedulable on productio", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric computation (batch, schedulable on productio", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric computation (batch, schedulable on productio", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric computation (batch, schedulable on productio", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric computation (batch, schedulable on productio", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric suite (demographic parity difference, equali", "target": "clause:ieee_7000:\u00a77.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric suite (demographic parity difference, equali", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric suite (demographic parity difference, equali", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric suite (demographic parity difference, equali", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric suite (demographic parity difference, equali", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric suite (demographic parity difference, equali", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric suite (demographic parity difference, equali", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric suite (demographic parity difference, equali", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric taxonomy (~70 metrics)", "target": "clause:ieee_7000:\u00a77.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric taxonomy (~70 metrics)", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metric taxonomy (~70 metrics)", "target": "clause:nyc_ll144:\u00a720-871 (Bias audit requirements)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "target": "clause:ieee_7000:\u00a710", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "target": "clause:ieee_7000:\u00a77", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "target": "clause:ieee_7000:\u00a79", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "target": "clause:iso_42001:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (quantitative outcome indicators)", "target": "clause:ieee_7000:\u00a79.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (quantitative outcome indicators)", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (quantitative outcome indicators)", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (quantitative outcome indicators)", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (quantitative outcome indicators)", "target": "clause:nist_rmf:MEASURE 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (quantitative outcome indicators)", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (quantitative outcome indicators)", "target": "clause:openai_model_spec:Stay in bounds; Seek the truth together; Do the best work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (vendor due-diligence benchmark)", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (vendor due-diligence benchmark)", "target": "clause:meta_llama_rai:Responsible Use Guide (provider guidance); Llama Acceptable", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (vendor due-diligence benchmark)", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (vendor due-diligence benchmark)", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (vendor due-diligence benchmark)", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics (vendor due-diligence benchmark)", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics and mitigation algorithms (training curricu", "target": "clause:ieee_7000:Clause 8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics and mitigation algorithms (training curricu", "target": "clause:iso_42001:7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics and mitigation algorithms (training curricu", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Fairness metrics and mitigation algorithms (training curricu", "target": "clause:nist_rmf:GOVERN 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Protected attribute specification (privileged/unprivileged g", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Protected attribute specification (privileged/unprivileged g", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Protected attribute specification (privileged/unprivileged g", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Protected attribute specification (privileged/unprivileged g", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Subgroup fairness metrics and bias mitigation algorithms", "target": "clause:ieee_7000:Clause 10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Subgroup fairness metrics and bias mitigation algorithms", "target": "clause:meta_llama_rai:Responsible AI considerations (fairness and inclusion)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Subgroup fairness metrics and bias mitigation algorithms", "target": "clause:microsoft_rai:I1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Subgroup fairness metrics and bias mitigation algorithms", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Subgroup fairness metrics and bias mitigation algorithms", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ibm_ai_fairness:Subgroup fairness metrics and bias mitigation algorithms", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a710", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a710", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a710", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a710", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a710", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a710", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a710", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a710", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a711", "target": "clause:iso_42001:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a711", "target": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a711", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a711", "target": "clause:mitre:AML.M0021", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a711", "target": "clause:mitre:AML.M0022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a711", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a711", "target": "clause:nist_rmf:MAP 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a711", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75", "target": "clause:iso_42001:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75", "target": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75", "target": "clause:mitre:AML.M0021", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75", "target": "clause:mitre:AML.M0022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75", "target": "clause:nist_rmf:MAP 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75.4", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document); Build trans", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75.4", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75.4", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75.4", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75.4", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a75.4", "target": "clause:un_ethics_ai:\u00b637 (Transparency)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a76.2", "target": "clause:iso_23894:4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a76.2", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a76.2", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a76.2", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a76.2", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a76.2", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a76.2", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a76.2", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a76.2", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a76.2", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a76.2", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a76.2", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77", "target": "clause:iso_42001:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77.3", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77.3", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77.3", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77.3", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77.3", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77.3", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77.3", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77.3", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77.3", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77.3", "target": "clause:nyc_ll144:\u00a720-871 (Bias audit requirements)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77.3", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77.3", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a77.3", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a79", "target": "clause:iso_42001:8.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a79", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a79", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a79", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a79", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a79", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a79", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a79.3", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a79.3", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a79.3", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a79.3", "target": "clause:nist_rmf:MEASURE 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a79.3", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:\u00a79.3", "target": "clause:openai_model_spec:Stay in bounds; Seek the truth together; Do the best work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibitio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:meta_llama_rai:Responsible AI considerations (fairness and inclusion)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:microsoft_rai:I1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:openai_model_spec:Stay in bounds (prohibited sexual content involving minors);", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 10", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 11", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 11", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 11", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 11", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 11", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 11", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 11", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 11", "target": "clause:nist_rmf:MEASURE 2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 11", "target": "clause:nist_rmf:MEASURE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 11", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 11", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 11", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 11", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:openai_model_spec:The chain of command", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 7", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 8", "target": "clause:iso_42001:7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 8", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 8", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 8", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 8", "target": "clause:nist_rmf:GOVERN 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 8", "target": "clause:oecd_ai_principles:Principle 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 8", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 8", "target": "clause:un_ethics_ai:\u00b635\u2013\u00b636 (Human oversight and determination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibited", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:nist_rmf:MANAGE 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ieee_7000:Clause 9", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:1.2.3", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:1.2.3", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:1.2.3", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:1.2.3", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:1.2.3", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:1.2.3", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:1.2.3", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:1.2.3", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:1.2.3", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:iso_42001:A.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.M0013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.T0066", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.T0081", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.T0099", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.T0100", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:nist_rmf:AI RMF: Govern, Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C10.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C12.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C8.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C8.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C9.2.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C9.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_aisvs:C9.5.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.1", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:iso_42001:A.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre_atlas:AML.M0032", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre_atlas:AML.T0025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre_atlas:AML.T0105", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C4.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C4.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C9.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.1.2", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:iso_42001:A.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:iso_42001:A.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:iso_42001:A.6.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:mitre_atlas:AML.T0057", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:nist_rmf:AI RMF: Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_aisvs:C11.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_aisvs:C3.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_aisvs:C9.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.1", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:iso_42001:A.8.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre_atlas:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre_atlas:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre_atlas:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre_atlas:AML.T0101", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:nist_rmf:AI RMF: Govern, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_ai_exchange:seceducate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C11.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C7.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C9.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.2.2", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:iso_42001:A.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:iso_42001:A.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:iso_42001:A.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:iso_42001:A.4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.M0005", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.M0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.M0032", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0034.002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0056", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0057", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0066", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0081", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0100", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre_atlas:AML.T0105", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:nist_rmf:AI RMF: Govern, Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C10.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C10.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C11.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C12.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C2.1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C4.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C4.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C5.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C7.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C7.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C8.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C8.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C8.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.2.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.5.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_aisvs:C9.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.1", "target": "clause:owasp_llm10:LLM10:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_aisvs:C11.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:iso_42001:A.6.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:iso_42001:A.6.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C11.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C12.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C12.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C12.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C3.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C3.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C3.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C9.3.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C9.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.3.3", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:iso_42001:A.9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:mitre_atlas:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:mitre:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:owasp_ai_exchange:seceducate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:imda_mgf:2.4", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:10.1", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:10.1", "target": "clause:microsoft_azure_resil:BCDR \u2013 Post-incident review and recovery objective validatio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:10.1", "target": "clause:nist_csf:ID.IM-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:10.1", "target": "clause:nist_sp800_34:\u00a74.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:5.1", "target": "clause:microsoft_azure_resil:Business continuity planning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:5.1", "target": "clause:nist_csf:GV.RR", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:5.1", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:5.1", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:5.3", "target": "clause:microsoft_azure_resil:Business continuity planning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:5.3", "target": "clause:nist_csf:GV.RR-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:5.3", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:5.3", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 leadership risk ownership", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:6.2", "target": "clause:microsoft_azure_resil:BCDR design guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:6.2", "target": "clause:nist_csf:GV.PO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:6.2", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:7.1", "target": "clause:nist_csf:GV.SC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:7.1", "target": "clause:nist_sp800_34:\u00a72.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.2", "target": "clause:iso_27031:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.2", "target": "clause:microsoft_azure_resil:BCDR \u2013 Recovery objectives (RTO/RPO) definition and validati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.2", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Business continuity planning methodol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.2", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 BCDR design guidance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.2", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 Business continuity tiering by service", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.2", "target": "clause:nist_800_160_v2:Appendix D", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.2", "target": "clause:nist_csf:ID.AM-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.2", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.2", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.2", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.2", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.2", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical capability levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.2", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.3", "target": "clause:microsoft_azure_resil:BCDR \u2013 Third-party service dependency continuity planning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.3", "target": "clause:nist_csf:GV.SC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.2.3", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.3.4", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Geo-redundancy and failover configura", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.3.4", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.3.4", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven availability changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4", "target": "clause:iso_27031:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 design guidance for regulated work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery objectives and failover conf", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4", "target": "clause:microsoft_azure_resil:RE:09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.2", "target": "clause:microsoft_azure_resil:BCDR \u2014 Failover configuration and availability zone design", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.2", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.2", "target": "clause:nist_sp800_34:\u00a73.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.3", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.3", "target": "clause:microsoft_azure_resil:Business continuity planning \u2014 Communication procedures and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.3", "target": "clause:nist_sp800_34:\u00a74.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.4", "target": "clause:microsoft_azure_resil:Durable Functions checkpoint", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.4", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.4", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Geo-redundant storage design, Azur", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:microsoft_azure_resil:BCDR \u2013 Graceful degradation design and availability zone fai", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:microsoft_azure_resil:BCDR \u2014 Data backup, geo-redundant recovery, and RPO verifica", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:microsoft_azure_resil:Failover configuration \u2014 Return-to-service validation and pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:microsoft_azure_resil:Failover configuration and recovery objectives", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:microsoft_azure_resil:RE:05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:nist_800_160_v2:\u00a72.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:nist_csf:PR.IR-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:nist_csf:RC.RP", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:nist_csf:RC.RP-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:nist_csf:RC.RP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:nist_sp800_34:\u00a73.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.4.5", "target": "clause:nist_sp800_34:\u00a74.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.5", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.5", "target": "clause:microsoft_azure_resil:BCDR \u2013 Testing and validation of failover and recovery contr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.5", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Testing and validation program", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.5", "target": "clause:nist_800_160_v2:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.5", "target": "clause:nist_csf:ID.IM-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.5", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:8.5", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:iso_27031:10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:iso_27031:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 BCDR documentation, failover test", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery documentation and activity l", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:microsoft_azure_resil:BCDR documentation: fault tolerance evidence", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:microsoft_azure_resil:Business continuity planning \u2013 BCDR evidence documentation a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 RTO/RPO measurement and BCDR complianc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:nist_csf:GV.OC-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:nist_csf:GV.OV-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:nist_csf:GV.RR-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:nist_csf:ID.IM-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:nist_csf:RC.RP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:nist_sp800_34:\u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.1", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Capabilities and Safeguards Repor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.2", "target": "clause:iso_27031:11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.2", "target": "clause:iso_27031:13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.2", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Post-recovery documentation and compl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.2", "target": "clause:nist_800_160_v2:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.2", "target": "clause:nist_csf:GV.OV-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.2", "target": "clause:nist_csf:ID.IM-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.2", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_22301:9.2", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a75.1 Internal governanc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_23894:4", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_23894:4", "target": "clause:iso_42001:8.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_23894:4", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_23894:4", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_23894:4", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_23894:4", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_23894:4", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_23894:4", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_23894:4", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_23894:4", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_23894:4", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:7", "target": "clause:okta_iam:Okta ISPM \u2014 Unmanaged Agent Discovery", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:7", "target": "clause:scim:RFC 7644 \u00a73.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:7.2", "target": "clause:nist_800_63:SP 800-63-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:7.2", "target": "clause:okta_iam:Okta Universal Directory \u2014 Human NHI Separation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:8", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:8", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:8", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:8", "target": "clause:okta_iam:Okta \u2014 Concurrent Session Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:nist_800_63:SP 800-63-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:nist_800_63:SP 800-63-4 \u00a73", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:nist_800_63:SP 800-63C-4 \u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:nist_zt:\u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:nist_zt:Tenet 7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:okta_iam:Okta for AI Agents \u2014 Owner Binding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:okta_iam:Okta Identity Governance \u2014 Governance Structure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:okta_iam:Okta Identity Governance \u2014 Program Metrics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:okta_iam:Okta System Log \u2014 Token Exchange Audit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:okta_iam:Okta Workflows \u2014 Identity Incident Response", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 'Building trust' public disclosu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 safeguards for High-capability d", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:ping_identity:Ping Identity \u2014 Federated Cross Org Authorization", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:ping_identity:Ping Identity for AI \u2014 Governance Capabilities", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_24760:ISO/IEC 24760-2:2015", "target": "clause:scim:RFC 7643 \u00a74.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:4", "target": "clause:iso_37301:4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:4", "target": "clause:microsoft_compliance:ISO 42001 assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.23", "target": "clause:iso_37301:9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.23", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.23", "target": "clause:nist_csf:ID.AM-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.23", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.23", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.23", "target": "clause:soc2:CC6.1, CC7.1, CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.31", "target": "clause:iso_37301:4.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.31", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.31", "target": "clause:microsoft_compliance:FedRAMP High & DoD IL5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.31", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.31", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.31", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.31", "target": "clause:openai_policies:Data residency commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.31", "target": "clause:soc2:A1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.33", "target": "clause:iso_37301:7.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.33", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.33", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.33", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.33", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.9", "target": "clause:iso_37301:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.9", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.9", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.5.9", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.8.15", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.8.15", "target": "clause:nist_csf:PR.DS-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.8.15", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.8.15", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.8.8", "target": "clause:nist_800_53:RA-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.8.8", "target": "clause:nist_800_53:SI-2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.8.8", "target": "clause:nist_csf:ID.RA-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27001:A.8.8", "target": "clause:nist_csf:ID.RA-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.10", "target": "clause:iso_42001:4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.10", "target": "clause:microsoft_azure_ai:Azure AI Search index scope configuration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.12", "target": "clause:iso_30401:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.12", "target": "clause:iso_30401:8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.12", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.12", "target": "clause:iso_42001:6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.12", "target": "clause:iso_42001:A.7.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.12", "target": "clause:w3c_prov:\u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.15", "target": "clause:iso_30401:4.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.15", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.15", "target": "clause:microsoft_azure_ai:Azure AI Search Security Filters", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.19", "target": "clause:iso_42001:A.10.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.36", "target": "clause:iso_30401:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.36", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.36", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.36", "target": "clause:itil_4:\u00a75.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:5.36", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:8.10", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:8.15", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:8.15", "target": "clause:w3c_prov:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:8.15", "target": "clause:w3c_prov:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:8.8", "target": "clause:iso_42001:6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27002:8.8", "target": "clause:openlineage:Run events (OpenLineage OpenAPI spec)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:10", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery objectives and failover conf", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:10", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:10", "target": "clause:nist_csf:RC.RP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:10", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:10", "target": "clause:nist_sp800_34:\u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:11", "target": "clause:microsoft_azure_resil:BCDR \u2013 Post-incident review and recovery objective validatio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:11", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Post-recovery documentation and compl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:11", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Testing and validation program", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:11", "target": "clause:microsoft_azure_resil:Business continuity planning \u2014 Communication procedures and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:11", "target": "clause:nist_csf:ID.IM-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:11", "target": "clause:nist_csf:ID.IM-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:11", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:11", "target": "clause:nist_sp800_34:\u00a74.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:11", "target": "clause:nist_sp800_34:\u00a74.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:13", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 BCDR documentation, failover test", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:13", "target": "clause:nist_800_160_v2:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:13", "target": "clause:nist_csf:GV.OV-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:13", "target": "clause:nist_csf:ID.IM-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:13", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:13", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a75.1 Internal governanc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:8", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Business continuity planning methodol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:8", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:8", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27031:8", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:5.7.1", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 compliance score and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:5.7.1", "target": "clause:nist_pf:GV.MT-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:5.7.3", "target": "clause:microsoft_rai:Microsoft Privacy Report \u2014 periodic privacy governance discl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:5.8.2", "target": "clause:microsoft_rai:Azure AI certifications \u2014 ISO 27001, SOC 2, ISO 42001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:5.8.2", "target": "clause:openai_privacy:OpenAI certifications \u2014 SOC 2, ISO 27001, ISO 42001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:6.13", "target": "clause:microsoft_rai:Microsoft Products and Services DPA \u2014 security incident noti", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:6.5.2.1", "target": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:6.5.2.1", "target": "clause:nist_pf:ID.IM-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:6.5.2.1", "target": "clause:owasp_ai_exchange:segregatedata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:6.7", "target": "clause:microsoft_rai:Azure encryption \u2014 at rest and in transit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:6.7", "target": "clause:nist_pf:PR.DS-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:6.7", "target": "clause:nist_pf:PR.DS-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:6.7", "target": "clause:openai_privacy:OpenAI security practices \u2014 AES-256 at rest, TLS 1.2+ in tra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:6.9.4", "target": "clause:microsoft_purview:Purview Insider Risk Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:6.9.4", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 control evidence coll", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:6.9.4", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2", "target": "clause:nist_pf:ID.IM-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.1", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence archive", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.1", "target": "clause:microsoft_rai:Microsoft Purview Data Map \u2014 lineage tracking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.1", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.1", "target": "clause:nist_pf:ID.IM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.2", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 accountability and on", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.2", "target": "clause:nist_pf:GV.MT-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.2", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.3", "target": "clause:nist_pf:CT.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.3", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.4", "target": "clause:nist_pf:CT.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.4", "target": "clause:okta_iam:Okta real-time directory synchronization \u2014 consent state pro", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.4", "target": "clause:openai_privacy:OpenAI API usage monitoring \u2014 data control configuration aud", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.4", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.5", "target": "clause:microsoft_purview:Microsoft Purview \u2014 Sensitive Information Types and DLP", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.5", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.5", "target": "clause:nist_pf:CT.DP-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.5", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.8", "target": "clause:lgpd:37", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.8", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence collection a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.8", "target": "clause:microsoft_rai:Microsoft Purview Data Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.8", "target": "clause:ms_ifc_agents:Propagate labels \u2014 labels travel with derivative results as", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.8", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.8", "target": "clause:nist_pf:CT.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.8", "target": "clause:nist_pf:GV.PO-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.8", "target": "clause:nist_pf:ID.IM-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.8", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.8", "target": "clause:pipl:55", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.2.8", "target": "clause:quebec_law25:3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.3", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.3.7", "target": "clause:nist_pf:CT.DM-P7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.3.7", "target": "clause:okta_iam:Okta Workflows \u2014 event-driven lifecycle automation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.3.7", "target": "clause:openai_privacy:OpenAI API data controls \u2014 retention and training configurat", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.3.9", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.3.9", "target": "clause:okta_iam:Okta System Log \u2014 real-time audit events", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.3.9", "target": "clause:openai_privacy:OpenAI privacy request records", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.1", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.1", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.1", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.4", "target": "clause:microsoft_rai:Microsoft Purview Information Protection \u2014 classification an", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.4", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.4", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.4", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.5", "target": "clause:nist_pf:CT.DM-P4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.5", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.7", "target": "clause:microsoft_rai:Microsoft Purview Data Lifecycle Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.7", "target": "clause:openai_privacy:OpenAI API data retention policy \u2014 30-day default", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.7", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.9", "target": "clause:microsoft_purview:Microsoft platform encryption in transit (TLS)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.4.9", "target": "clause:nist_pf:PR.DS-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.5", "target": "clause:nist_pf:CT.PO-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.5", "target": "clause:owasp_ai_exchange:segregatedata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.5.1", "target": "clause:nist_pf:GV.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.5.1", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.5.3", "target": "clause:microsoft_purview:Microsoft 365 Advanced Data Residency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.5.3", "target": "clause:nist_pf:GV.PO-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:7.5.3", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.2", "target": "clause:microsoft_rai:Microsoft Product Terms and Data Processing Agreement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.2", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.2", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.2", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.2", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.2", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.2.6", "target": "clause:microsoft_purview:Purview Audit (unified audit log)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.3", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 account deactivation and deletio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.3", "target": "clause:openai_privacy:OpenAI data deletion controls", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.5.6", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.5.6", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.5.6", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.5.6", "target": "clause:nist_pf:ID.DE-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.5.6", "target": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.5.6", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.5.8", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.5.8", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.5.8", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.5.8", "target": "clause:nist_pf:ID.DE-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.5.8", "target": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:8.5.8", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:PIMS certification (standard as a whole)", "target": "clause:microsoft_rai:Azure AI compliance certifications \u2014 ISO 27001, SOC 2, ISO 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:PIMS certification (standard as a whole)", "target": "clause:nist_pf:GV.MT-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_27701:PIMS certification (standard as a whole)", "target": "clause:openai_privacy:OpenAI compliance certifications \u2014 SOC 2, ISO 27001, ISO 420", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:10.1", "target": "clause:iso_42001:10.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:10.1", "target": "clause:itil_4:\u00a75.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:10.1", "target": "clause:itil_4:Incident Management Practice", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:4.4.2", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:4.4.2", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:4.4.2", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:4.4.2", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:4.4.2", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:4.4.2", "target": "clause:w3c_prov:\u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:4.4.3", "target": "clause:microsoft_azure_ai:Azure AI Search Security Filters", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:5.1", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:5.3", "target": "clause:iso_42001:5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:5.3", "target": "clause:iso_42001:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:5.3", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:6.1", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:7.5", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:7.5", "target": "clause:w3c_prov:\u00a75.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:7.5.3", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:8", "target": "clause:iso_42001:6.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:8", "target": "clause:iso_42001:6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:8", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:8", "target": "clause:iso_42001:A.7.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:8", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:8", "target": "clause:itil_4:\u00a75.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:9.1", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:9.1", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:9.1", "target": "clause:itil_4:\u00a75.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:9.1", "target": "clause:itil_4:Continual Improvement Practice", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:9.1", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:9.2", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:9.2", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:9.2", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:9.3", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:9.3", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:9.3", "target": "clause:microsoft_azure_ai:Azure AI Compliance \u2014 Evidence Collection for Audits", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_30401:9.3", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.4", "target": "clause:iso_42001:6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.4", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.4", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.4", "target": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.4", "target": "clause:owasp_aivss:AIVSS-AARS", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.5", "target": "clause:iso_42001:4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.5", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.5", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.5", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.5.2", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.5.2", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.5.2", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.5.2", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.5.2", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.6", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.6", "target": "clause:iso_42001:A.6.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.6", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.6", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.6", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.6", "target": "clause:mitre:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.6", "target": "clause:nist_rmf:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.6", "target": "clause:nist_rmf:MANAGE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.6", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.6", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.6", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.6", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.6", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:iso_42001:9.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:nist_rmf:GOVERN 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:openai_preparedness:Building trust (\u00a75) \u2014 framework iteration and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74) and Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_31000:6.7", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 4.6 \u2014 Compliance risk assessment", "target": "clause:microsoft_rai:Azure PIM Emergency Access \u2014 Governed Break-Glass Activation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 4.6 \u2014 Compliance risk assessment", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 4.6 \u2014 Compliance risk assessment", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 4.6 \u2014 Compliance risk assessment", "target": "clause:okta_authz:Okta Privileged Access + Okta Workflows \u2014 Emergency Override", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 6.3 \u2014 Planning of changes", "target": "clause:iso_42001:6.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 6.3 \u2014 Planning of changes", "target": "clause:microsoft_rai:Azure Event Grid \u2014 AI Governance Policy Change Alerts", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 6.3 \u2014 Planning of changes", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 6.3 \u2014 Planning of changes", "target": "clause:okta_authz:Okta Event Hooks \u2014 Authorization Policy Change Notifications", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 7.2 \u2014 Competence", "target": "clause:iso_42001:5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 7.2 \u2014 Competence", "target": "clause:microsoft_rai:Azure RBAC \u2014 Authority Delegation Hierarchy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 7.2 \u2014 Competence", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 7.2 \u2014 Competence", "target": "clause:okta_authz:Okta Authorization Server \u2014 OAuth 2.0 Delegation Constraints", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:iso_42001:A.7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:microsoft_rai:Azure DevOps Required Reviewers \u2014 Multi-Party AI Deployment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:microsoft_rai:Azure Policy Custom Definitions \u2014 AI Action Approval Thresho", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:microsoft_rai:Microsoft Purview \u2014 Data Governance for AI Knowledge Sources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:nist_rmf:MAP 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:okta_authz:Okta Authorization Server \u2014 Time-Bounded Approval-Scoped Tok", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:okta_authz:Okta Fine-Grained Authorization \u2014 Knowledge Resource Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:okta_authz:Okta Workflows \u2014 Automated Escalation Gate Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "target": "clause:okta_authz:Okta Workflows \u2014 Multi-Party Token Approval Chains", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Unified AI Authorization Audit Tra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "target": "clause:nist_800_53:AU-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Authorization Decision Reco", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Ongoing Evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "target": "clause:soc2:CC7.2 \u2014 The entity monitors system components for anomalies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.1", "target": "clause:iso_42001:10.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.1", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.1", "target": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report \u2014 Systematic Le", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.1", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.1", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.1", "target": "clause:soc2:CC5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.2", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.2", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.2", "target": "clause:nist_csf:RS.AN", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.2", "target": "clause:nist_csf:RS.CO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.2", "target": "clause:nist_csf:RS.MI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.2", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.2", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.2", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.2", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.2", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:10.2", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4", "target": "clause:microsoft_compliance:ISO 42001 assessment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:iso_42001:4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:microsoft_compliance:Improvement Actions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:openai_policies:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:soc2:A1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:soc2:CC1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:soc2:CC2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.5", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.6", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:4.6", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:5.1", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:5.1", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:5.1", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:5.1", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:5.1", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:5.1", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:5.3", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:5.3", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:5.3", "target": "clause:soc2:CC1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:6.1", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:6.1", "target": "clause:okta_governance:Access Certifications", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:6.1", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:6.1", "target": "clause:soc2:CC3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:6.2", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:6.2", "target": "clause:nist_csf:GV.PO-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:6.2", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:6.2", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.1", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.1", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.1", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.1", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.3", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.3", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:iso_42001:7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:microsoft_compliance:Compliance Manager platform", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:microsoft_rai:Azure Policy Initiative Assignments \u2014 AI Policy Register Imp", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:microsoft_rai:Azure Resource Manager Policy Versioning \u2014 Automated Policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:nist_800_53:AU-11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:nist_800_53:CM-3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:nist_800_53:PL-1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:opa_rego:OPA Policy Language documentation (Rego)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Documented Evalu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5.3", "target": "clause:microsoft_compliance:Control mapping", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5.3", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5.3", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:7.5.3", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:iso_42001:8.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Resource Provisioning Commitment Approval", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:microsoft_rai:Azure Policy + Microsoft Purview Data Governance \u2014 Automated", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:microsoft_rai:Azure SLA + Azure Monitor \u2014 SLA Commitment Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:microsoft_rai:Microsoft Purview Compliance Solutions \u2014 Contractual Conflic", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:nis2:21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:nist_800_53:AC-23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:oecd_cg:II.F / IV.A \u2014 Related party transactions \u2014 approval and disc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:okta_authz:Okta Authorization Server \u2014 Commitment-Scoped Token Restrict", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:openai_preparedness:OpenAI Usage Policies \u2014 Permitted Use and Representation Gov", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:soc2:A1.1 \u2014 Capacity management and monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.1", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.2", "target": "clause:microsoft_rai:Microsoft Sentinel \u2014 AI Policy Incident Classification and S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.2", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:8.2", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:iso_42001:9.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:microsoft_rai:Azure AI Foundry Observability \u2014 Operating Intent Drift Moni", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:microsoft_rai:Azure Policy Compliance Dashboard \u2014 AI Workload Policy Adher", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:microsoft_rai:Microsoft Defender for Cloud \u2014 AI Workload Posture and Threa", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:microsoft_rai:Microsoft Defender for Cloud + Purview \u2014 Cross-Domain Policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:microsoft_rai:Microsoft Purview + Azure Policy Compliance Reports \u2014 AI Gov", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Contract Obligation Audit Trail Re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Custom Assessments fo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Regulatory Template C", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:nist_800_53:AU-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:nist_800_53:AU-6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:nist_800_53:SI-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:nist_csf:DE.CM-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:nist_rmf:MEASURE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (oversight, acc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:okta_authz:Okta Authorization Server \u2014 Signed Token Claims as Authoriza", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:okta_authz:Okta Behavior Detection + System Log \u2014 Sign-In Anomaly Signa", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:okta_authz:Okta System Log \u2014 Authorization Policy Adherence Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:okta_authz:Okta System Log \u2014 Identity-Mediated Procurement Authorizatio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Contract Authorization Evid", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:okta_authz:Okta System Log + Identity Governance Reports \u2014 Authority Li", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:openai_policies:Data residency commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 System Cards and Safeguards Repo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:soc2:CC3.1 \u2014 COSO Principle 6 \u2014 Specifies suitable objectives", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:soc2:CC4.1 and CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:soc2:CC7.2 \u2014 Detection and Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1", "target": "clause:soc2:CC7.2 \u2014 Monitoring of system components", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.1", "target": "clause:microsoft_compliance:Compliance score monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.1", "target": "clause:nist_csf:DE.CM-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.2", "target": "clause:microsoft_compliance:Improvement actions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.2", "target": "clause:nist_800_53:CA-2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.2", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.2", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.3", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.3", "target": "clause:microsoft_compliance:Compliance score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.3", "target": "clause:nist_csf:ID.AM-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.3", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.3", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.3", "target": "clause:soc2:CC6.1, CC7.1, CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.5", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.5", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.5", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.1.5", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:iso_42001:9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:microsoft_compliance:Compliance Score", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:microsoft_compliance:Improvement Action", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Structured Internal A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:microsoft_rai:Microsoft RAI Red Team Operations \u2014 Independent Program Asse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:nist_csf:ID.RA-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:okta_authz:Okta System Log Compliance Reports \u2014 Authorization Audit Evi", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:soc2:CC4.1 \u2014 COSO Principle 16 \u2014 ongoing and/or separate evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.2", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.3", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.3", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.3", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.3", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.3", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.3.2", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.3.2", "target": "clause:okta_governance:Access Requests", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_37301:9.3.2", "target": "clause:soc2:CC2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report \u2014 Systematic Le", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:nist_rmf:MANAGE 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:openai_preparedness:Building trust (\u00a75) \u2014 framework iteration and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.1", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74) and Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:itil_4:\u00a75.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:itil_4:Incident Management Practice", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms; Llama Acceptabl", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:mitre_atlas:ATLAS tactics and techniques (framework-wide)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:mitre:AML.T0043", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:10.2", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.1", "target": "clause:microsoft_compliance:Assessment template", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.1", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.2", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.2", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.2", "target": "clause:microsoft_rai:I1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.2", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.2", "target": "clause:nist_rmf:GOVERN 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.2", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.2", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.2", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.2", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.2", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.2", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.2", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:4.3", "target": "clause:microsoft_azure_ai:Azure AI Search index scope configuration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.1", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.1", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.1", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.1", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Principal Accountability for AI Ac", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.1", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.1", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.1", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.1", "target": "clause:okta_authz:Okta Identity Tokens \u2014 Principal Identity Binding for AI Age", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.1", "target": "clause:openai_preparedness:Internal governance (\u00a75.1) \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.1", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.2", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.2", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.2", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.2", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.2", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.2", "target": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.3", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.3", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.3", "target": "clause:microsoft_rai:Azure RBAC \u2014 Authority Delegation Hierarchy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.3", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.3", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.3", "target": "clause:nist_rmf:GOVERN-2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.3", "target": "clause:nist_rmf:GOVERN-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.3", "target": "clause:okta_authz:Okta Authorization Server \u2014 OAuth 2.0 Delegation Constraints", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.3", "target": "clause:openai_preparedness:Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.3", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:5.3", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:mitre:AML.T0043", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:nist_ai_600_1:CBRN", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:nist_rmf:MAP-1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:nist_rmf:MEASURE-2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Tracked Categories and Deploymen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:owasp_aitg:AITG-INF-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:owasp_aivss:AIVSS-AARS", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.1", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.1", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.1", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.1", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.1", "target": "clause:nist_rmf:GOVERN 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.1", "target": "clause:oecd_ai_principles:Principle 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.1", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:itil_4:\u00a75.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:llm10:LLM09:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:nist_ai_600_1:HUMAN-AI-CONFIG", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:nist_rmf:GOVERN 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:nist_rmf:GOVERN-1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:nist_rmf:GOVERN-3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:nist_rmf:MEASURE-2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:oecd_ai_principles:Principle 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:owasp_aitg:AITG-APP-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:owasp_aitg:AITG-APP-10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:owasp_aitg:AITG-APP-13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.2", "target": "clause:w3c_prov:\u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.3", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.3", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.3", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.3", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.3", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.3", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.3", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.3", "target": "clause:openlineage:Run events (OpenLineage OpenAPI spec)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.3", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.3", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.4", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Model Deployment Restriction and Content S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.1.4", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.3", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.3", "target": "clause:microsoft_rai:Azure Event Grid \u2014 AI Governance Policy Change Alerts", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.3", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.3", "target": "clause:mitre:AML.T0044", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.3", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.3", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.3", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.3", "target": "clause:okta_authz:Okta Event Hooks \u2014 Authorization Policy Change Notifications", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.3", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:6.3", "target": "clause:owasp_aitg:AITG-MOD-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.1", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.1", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.1", "target": "clause:mitre_atlas:AML.T0010", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.1", "target": "clause:mitre:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.1", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.1", "target": "clause:nist_rmf:GOVERN 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.1", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.1", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.1", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.1", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.1", "target": "clause:owasp_aisvs:C9.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.1", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.2", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.2", "target": "clause:nist_rmf:GOVERN 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.4", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.4", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.4", "target": "clause:nist_rmf:MEASURE 2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.4", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.4", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.4", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.4", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:microsoft_rai:Azure Policy Initiative Assignments \u2014 AI Policy Register Imp", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:microsoft_rai:Azure Resource Manager Policy Versioning \u2014 Automated Policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:nist_800_53:AU-11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:nist_800_53:CM-3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:nist_800_53:PL-1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:nist_rmf:GOVERN-1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:nist_rmf:MEASURE-2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:opa_rego:OPA Policy Language documentation (Rego)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Documented Evalu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:7.5", "target": "clause:w3c_prov:\u00a75.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:microsoft_rai:Azure Policy + Microsoft Purview Data Governance \u2014 Automated", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:microsoft_rai:Azure SLA + Azure Monitor \u2014 SLA Commitment Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:microsoft_rai:Microsoft Purview Compliance Solutions \u2014 Contractual Conflic", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:microsoft_rai:PS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:mitre_atlas:AML.T0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:mitre:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:nist_800_53:AC-23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:nist_ai_600_1:2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:nist_rmf:MANAGE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:nist_rmf:MANAGE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:oecd_cg:II.F / IV.A \u2014 Related party transactions \u2014 approval and disc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy and Autonom", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.1", "target": "clause:soc2:A1.1 \u2014 Capacity management and monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.3", "target": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.3", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.3", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.3", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.3", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.3", "target": "clause:mitre:AML.M0021", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.3", "target": "clause:mitre:AML.M0022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.3", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.3", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.3", "target": "clause:nist_rmf:MAP 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.3", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.3", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.3", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:meta_llama_rai:Responsible Use Guide (provider guidance); Llama Acceptable", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Model Deployment Restriction and Content S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:nist_rmf:MEASURE 2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:openai_model_spec:The chain of command", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) and Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:8.4", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:itil_4:\u00a75.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:itil_4:\u00a75.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:itil_4:Continual Improvement Practice", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:meta_llama_rai:System-level alignment \u2014 input/output mitigations; Llama Acc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:microsoft_azure_ai:Azure AI Search \u2014 monitoring and search traffic analytics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:microsoft_rai:A3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:microsoft_rai:Azure AI Foundry Observability \u2014 Operating Intent Drift Moni", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:microsoft_rai:Azure Policy Compliance Dashboard \u2014 AI Workload Policy Adher", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:microsoft_rai:Microsoft Defender for Cloud + Purview \u2014 Cross-Domain Policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Custom Assessments fo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:mitre_atlas:AML.T0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:mitre_atlas:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_800_53:AU-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_800_53:SI-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_ai_600_1:MS-2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:GOVERN 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:MANAGE 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:MEASURE 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:MEASURE 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:MEASURE 2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:nist_rmf:MEASURE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:okta_authz:Okta Authorization Server \u2014 Signed Token Claims as Authoriza", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:okta_authz:Okta Behavior Detection + System Log \u2014 Sign-In Anomaly Signa", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:okta_authz:Okta for AI Agents \u2014 Scoped Token Authorization", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:okta_authz:Okta System Log \u2014 Authorization Policy Adherence Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:okta_authz:Okta System Log \u2014 Identity-Mediated Procurement Authorizatio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:openai_model_spec:Stay in bounds; Seek the truth together; Do the best work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Ongoing Evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Research Categories (Long-Range", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 System Cards and Safeguards Repo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:soc2:CC3.1 \u2014 COSO Principle 6 \u2014 Specifies suitable objectives", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:soc2:CC7.2 \u2014 Detection and Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:w3c_prov:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:w3c_prov:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:w3c_prov:\u00a75.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.1", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Structured Internal A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:microsoft_rai:Microsoft RAI Red Team Operations \u2014 Independent Program Asse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:nist_rmf:GOVERN-2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:nist_rmf:MEASURE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:okta_authz:Okta System Log Compliance Reports \u2014 Authorization Audit Evi", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:soc2:CC4.1 \u2014 COSO Principle 16 \u2014 ongoing and/or separate evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.2", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:itil_4:\u00a75.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:microsoft_azure_ai:Azure AI Compliance \u2014 Evidence Collection for Audits", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:microsoft_rai:I1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:nist_rmf:GOVERN 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:9.3", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:mitre_atlas:AML.M0013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:mitre_atlas:AML.T0010", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:mitre_atlas:AML.T0099", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:mitre:AML.T0010", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:nist_rmf:GOVERN-6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:owasp_ml_top10:ML06:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.10.3", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.2.2", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.2.2", "target": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.2.2", "target": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.2.2", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.2.2", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.2.2", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.2.2", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.2.2", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.2.2", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.2.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.2.2", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.3.2", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.3.2", "target": "clause:nist_rmf:AI RMF: Govern, Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.3.2", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.3.2", "target": "clause:owasp_aisvs:C9.2.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.3.2", "target": "clause:owasp_aisvs:C9.5.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.3.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.2", "target": "clause:nist_rmf:AI RMF: Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.2", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.2", "target": "clause:owasp_aisvs:C3.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.2", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:mitre_atlas:AML.T0081", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_aisvs:C10.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.4", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:mitre_atlas:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:mitre_atlas:AML.M0032", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:mitre_atlas:AML.T0034.002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:mitre_atlas:AML.T0105", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:owasp_aisvs:C12.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:owasp_aisvs:C4.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:owasp_aisvs:C4.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.4.5", "target": "clause:owasp_llm10:LLM10:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.5.2", "target": "clause:llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.5.2", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.5.2", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.5.2", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.5.2", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.5.2", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.5.2", "target": "clause:owasp_aisvs:C1.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.3", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.3", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.3", "target": "clause:mitre:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.3", "target": "clause:mitre:AML.T0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.3", "target": "clause:mitre:AML.T0044", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.3", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.3", "target": "clause:nist_rmf:GOVERN-4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.3", "target": "clause:nist_rmf:MAP-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.3", "target": "clause:nist_rmf:MAP-4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.3", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.3", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.3", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.3", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:llm10:LLM09:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:mitre:AML.T0043", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:mitre:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_ai_100_2:NISTAML.022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_ai_600_1:CONFABULATION", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_rmf:MANAGE-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_rmf:MEASURE-2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_rmf:MEASURE-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_rmf:MEASURE-2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C10.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C11.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C11.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C3.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C7.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C7.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aitg:AITG-MOD-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.4", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.5", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.5", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.5", "target": "clause:mitre:AML.T0044", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.5", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.5", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.5", "target": "clause:nist_rmf:MANAGE-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.5", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.5", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.5", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:microsoft_rai:Azure Machine Learning Model Monitoring \u2014 Knowledge Source S", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.M0005", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.M0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.T0025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.T0056", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.T0057", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:nist_800_53:CM-3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:nist_rmf:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:nist_rmf:GOVERN-1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:nist_rmf:MEASURE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C11.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C12.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C12.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C12.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C8.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C9.3.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C9.5.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aitg:AITG-APP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.6", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.7", "target": "clause:openai_transparency:System Card \u2014 Knowledge Limitations", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.8", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.8", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.8", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.8", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.8", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.8", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.8", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.8", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.8", "target": "clause:owasp_aisvs:C9.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.6.2.8", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.2", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.2", "target": "clause:mitre:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.2", "target": "clause:nist_ai_100_2:NISTAML.023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.2", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.2", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.2", "target": "clause:nist_rmf:MEASURE-2.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.2", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.2", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.2", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.2", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.2", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.2", "target": "clause:owasp_aitg:AITG-INF-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:itil_4:\u00a75.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:microsoft_azure_ai:Azure AI Search \u2014 Index Schema", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:mitre:AML.T0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:nist_rmf:MAP-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:nist_rmf:MEASURE-2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:owasp_aisvs:C8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:owasp_aisvs:C8.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:owasp_aisvs:C8.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:owasp_aisvs:C9.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.4", "target": "clause:w3c_prov:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:microsoft_rai:Azure Machine Learning \u2014 Model and Data Version Tracking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:microsoft_rai:Microsoft Purview \u2014 Data Governance for AI Knowledge Sources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:mitre_atlas:AML.M0031", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:mitre_atlas:AML.T0066", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:mitre_atlas:AML.T0070", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:mitre_atlas:AML.T0100", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:mitre:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:mitre:AML.T0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:nist_800_53:CM-3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:nist_ai_100_2:NISTAML.012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:nist_ai_100_2:NISTAML.013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:nist_ai_600_1:DATA-PRIVACY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:nist_rmf:GOVERN-6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:nist_rmf:MAP 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:okta_authz:Okta Fine-Grained Authorization \u2014 Knowledge Resource Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_aisvs:C3.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_aisvs:C6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_aisvs:C6.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_aitg:AITG-MOD-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:owasp_ml_top10:ML02:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:w3c_prov:\u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:w3c_prov:\u00a75.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.7.5", "target": "clause:w3c_prov:\u00a75.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.2", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.2", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.2", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.2", "target": "clause:nist_ai_600_1:INFO-INTEGRITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.2", "target": "clause:nist_rmf:AI RMF: Govern, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.2", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.2", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.2", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.2", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.2", "target": "clause:owasp_aisvs:C7.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.2", "target": "clause:owasp_aisvs:C7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.2", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.4", "target": "clause:nist_rmf:GOVERN-4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.4", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.4", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.5", "target": "clause:llm10:LLM09:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.5", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.5", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.5", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.8.5", "target": "clause:owasp_aitg:AITG-APP-14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre_atlas:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre_atlas:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre_atlas:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre_atlas:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre_atlas:AML.T0101", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre:AML.M0019", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_ai_exchange:seceducate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C11.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C5.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.2", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.4", "target": "clause:llm10:LLM09:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.4", "target": "clause:nist_rmf:MAP-2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_42001:A.9.4", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_5259:5259-1", "target": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_5259:5259-1", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_5259:5259-1", "target": "clause:nist_pf:ID.IM-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-110", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-110", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-110", "target": "clause:snowflake_horizon:Data Quality Monitoring (data metric functions)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-110", "target": "clause:snowflake_horizon:Object tagging", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-120", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-120", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-120", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-120", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-61", "target": "clause:microsoft_purview:Data Catalog \u2014 Data Lineage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-61", "target": "clause:microsoft_purview:Purview Compliance Manager", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-61", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-61", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-8", "target": "clause:microsoft_purview:Data Quality (data type and format rules)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-8", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-8", "target": "clause:nist_pf:CT.DP-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-8", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:iso_8000:8000-8", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:itil_4:\u00a75.1.2", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:itil_4:\u00a75.1.4", "target": "clause:microsoft_azure_ai:Azure AI Search \u2014 Index Schema", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:itil_4:\u00a75.1.4", "target": "clause:w3c_prov:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:itil_4:\u00a75.2.7", "target": "clause:microsoft_azure_ai:Azure AI Search \u2014 monitoring and search traffic analytics", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:lgpd:37", "target": "clause:microsoft_rai:Microsoft Purview Data Map", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:lgpd:37", "target": "clause:nist_pf:ID.IM-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:lgpd:37", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:lgpd:37", "target": "clause:pipl:55", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:lgpd:37", "target": "clause:quebec_law25:3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM01:2025", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM01:2025", "target": "clause:mitre:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM01:2025", "target": "clause:nist_ai_100_2:NISTAML.022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM01:2025", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM01:2025", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM01:2025", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM01:2025", "target": "clause:owasp_aitg:AITG-MOD-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM01:2025", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:mitre:AML.T0010", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:mitre:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:nist_ai_600_1:DATA-PRIVACY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:nist_rmf:GOVERN-6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:owasp_aisvs:C1.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:owasp_ml_top10:ML06:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM03:2025", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:mitre:AML.T0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:mitre:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:mitre:AML.T0043", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:nist_ai_100_2:NISTAML.012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:nist_ai_100_2:NISTAML.013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:nist_rmf:MAP-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:nist_rmf:MEASURE-2.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:nist_rmf:MEASURE-2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:owasp_aitg:AITG-MOD-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:owasp_ml_top10:ML02:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM04:2025", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:mitre:AML.T0043", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:nist_ai_600_1:CONFABULATION", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:nist_ai_600_1:HUMAN-AI-CONFIG", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:nist_rmf:MAP-2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:nist_rmf:MEASURE-2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:nist_rmf:MEASURE-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:owasp_aitg:AITG-APP-10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:owasp_aitg:AITG-APP-14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:llm10:LLM09:2025", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:microsoft_rai:T1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:microsoft_rai:T2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms; Llama Acceptabl", "target": "clause:microsoft_rai:RS2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Build transparency and reporting mechanisms; Llama Acceptabl", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:microsoft_rai:A5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:nist_rmf:GOVERN 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:oecd_ai_principles:Principle 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:oecd_ai_principles:Principle 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "target": "clause:un_ethics_ai:\u00b635\u2013\u00b636 (Human oversight and determination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibited", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibited", "target": "clause:microsoft_rai:F2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibited", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibitio", "target": "clause:microsoft_rai:RS1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibitio", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibitio", "target": "clause:openai_model_spec:Stay in bounds (prohibited sexual content involving minors);", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document); Build trans", "target": "clause:microsoft_rai:T3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document); Build trans", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document); Build trans", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document); Build trans", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document); Build trans", "target": "clause:un_ethics_ai:\u00b637 (Transparency)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance", "target": "clause:nist_rmf:MEASURE 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "target": "clause:microsoft_rai:A1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "target": "clause:microsoft_rai:F3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible AI considerations (fairness and inclusion)", "target": "clause:microsoft_rai:I1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible AI considerations (fairness and inclusion)", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible AI considerations (fairness and inclusion)", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible AI considerations (fairness and inclusion)", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "target": "clause:mitre:AML.M0021", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "target": "clause:mitre:AML.M0022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "target": "clause:nist_rmf:MAP 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible Use Guide (provider guidance); Llama Acceptable", "target": "clause:microsoft_rai:A2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible Use Guide (provider guidance); Llama Acceptable", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible Use Guide (provider guidance); Llama Acceptable", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:Responsible Use Guide (provider guidance); Llama Acceptable", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:System-level alignment \u2014 input/output mitigations; Llama Acc", "target": "clause:microsoft_rai:F1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:System-level alignment \u2014 input/output mitigations; Llama Acc", "target": "clause:microsoft_rai:RS3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:System-level alignment \u2014 input/output mitigations; Llama Acc", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:System-level alignment \u2014 input/output mitigations; Llama Acc", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:meta_llama_rai:System-level alignment \u2014 input/output mitigations; Llama Acc", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_ai:Azure AI Compliance \u2014 Evidence Collection for Audits", "target": "clause:w3c_prov:\u00a75.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_ai:Azure AI Search \u2014 Index Schema", "target": "clause:w3c_prov:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Azure Resiliency \u2014 Availability zone design and geo-redundan", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Azure Resiliency \u2014 Availability zone design and geo-redundan", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 BCDR documentation, failover test", "target": "clause:nist_csf:ID.IM-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 BCDR documentation, failover test", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 design guidance for regulated work", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Design lifecycle integration: BCDR", "target": "clause:nist_800_160_v2:\u00a72.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Design lifecycle integration: BCDR", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Geo-redundant storage design, Azur", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Geo-redundant storage design, Azur", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 infrastructure-as-code recovery (A", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 infrastructure-as-code recovery (A", "target": "clause:nist_sp800_34:\u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2013 Chaos testing and resilience validation (Azure Chaos", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2013 Chaos testing and resilience validation (Azure Chaos", "target": "clause:nist_csf:ID.IM-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2013 Graceful degradation design and availability zone fai", "target": "clause:nist_800_160_v2:\u00a72.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2013 Graceful degradation design and availability zone fai", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2013 Post-incident review and recovery objective validatio", "target": "clause:nist_csf:ID.IM-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2013 Post-incident review and recovery objective validatio", "target": "clause:nist_sp800_34:\u00a74.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2013 Recovery objectives (RTO/RPO) definition and validati", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2013 Recovery objectives (RTO/RPO) definition and validati", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2013 Testing and validation of failover and recovery contr", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2013 Testing and validation of failover and recovery contr", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2013 Third-party service dependency continuity planning", "target": "clause:nist_csf:GV.SC-07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2013 Third-party service dependency continuity planning", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2014 Data backup, geo-redundant recovery, and RPO verifica", "target": "clause:nist_csf:RC.RP-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2014 Data backup, geo-redundant recovery, and RPO verifica", "target": "clause:nist_sp800_34:\u00a73.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2014 Failover configuration and availability zone design", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR \u2014 Failover configuration and availability zone design", "target": "clause:nist_sp800_34:\u00a73.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance", "target": "clause:nist_csf:GV.PO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Business continuity planning methodol", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Business continuity planning methodol", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Business continuity planning methodol", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Deployment rollback and blue-green re", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Deployment rollback and blue-green re", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Deployment rollback and blue-green re", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Geo-redundancy and failover configura", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Geo-redundancy and failover configura", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven availability changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Post-recovery documentation and compl", "target": "clause:nist_csf:ID.IM-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Post-recovery documentation and compl", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery documentation and activity l", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery objectives and failover conf", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery objectives and failover conf", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Testing and validation program", "target": "clause:nist_csf:ID.IM-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Testing and validation program", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR documentation: fault tolerance evidence", "target": "clause:nist_csf:GV.OC-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:BCDR documentation: fault tolerance evidence", "target": "clause:nist_sp800_34:\u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Bulkhead pattern", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Business continuity planning", "target": "clause:nist_csf:GV.RR", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Business continuity planning", "target": "clause:nist_csf:GV.RR-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Business continuity planning", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Business continuity planning", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 leadership risk ownership", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Business continuity planning", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Business continuity planning \u2013 BCDR evidence documentation a", "target": "clause:nist_csf:GV.RR-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Business continuity planning \u2013 BCDR evidence documentation a", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Business continuity planning \u2014 Communication procedures and", "target": "clause:nist_sp800_34:\u00a74.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Circuit Breaker Pattern \u2014 Azure Architecture Center", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Durable Functions checkpoint", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Failover configuration \u2014 Blue/green deployment and deploymen", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Failover configuration \u2014 Blue/green deployment and deploymen", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Failover configuration \u2014 Blue/green deployment and deploymen", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard decisions affecting deployed mod", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Failover configuration \u2014 Return-to-service validation and pr", "target": "clause:nist_csf:RC.RP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Failover configuration and recovery objectives", "target": "clause:nist_csf:RC.RP", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Failover configuration and recovery objectives", "target": "clause:nist_sp800_34:\u00a74.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:RE:05", "target": "clause:nist_csf:PR.IR-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:RE:09", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:RE:09", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Recovery objectives \u2014 BCDR design guidance", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Recovery objectives \u2014 BCDR design guidance", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Recovery objectives \u2014 Business continuity tiering by service", "target": "clause:nist_800_160_v2:Appendix D", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Recovery objectives \u2014 Business continuity tiering by service", "target": "clause:nist_csf:ID.AM-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Recovery objectives \u2014 Business continuity tiering by service", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Recovery objectives \u2014 Business continuity tiering by service", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical capability levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Recovery objectives \u2014 RTO/RPO measurement and BCDR complianc", "target": "clause:nist_csf:ID.IM-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_azure_resil:Recovery objectives \u2014 RTO/RPO measurement and BCDR complianc", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:nist_csf:ID.AM-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:okta_governance:Access Requests", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:openai_policies:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:soc2:A1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:soc2:CC2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:soc2:CC2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:soc2:CC6.1, CC7.1, CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "target": "clause:nis2:21", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Manager platform", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:nist_csf:PR.DS-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:okta_governance:Access Certifications", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:openai_policies:Data residency commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:soc2:CC3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:soc2:CC4.1 and CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:soc2:CC5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance Score", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Compliance score monitoring", "target": "clause:nist_csf:DE.CM-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Control mapping", "target": "clause:nist_csf:GV.PO-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Control mapping", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Control mapping", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Control mapping", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Control mapping", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Control mapping", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Control mapping", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Control mapping", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:FedRAMP High & DoD IL5", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:FedRAMP High & DoD IL5", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:FedRAMP High & DoD IL5", "target": "clause:openai_policies:Data residency commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Action", "target": "clause:nist_csf:DE.CM-09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Action", "target": "clause:nist_csf:ID.RA-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Action", "target": "clause:nist_csf:RS.AN", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Action", "target": "clause:nist_csf:RS.CO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Action", "target": "clause:nist_csf:RS.MI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Action", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Action", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Action", "target": "clause:okta_governance:Entitlement Management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Action", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Action", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Action", "target": "clause:soc2:CC1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Action", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Action", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement actions", "target": "clause:nist_800_53:CA-2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement actions", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement actions", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Actions", "target": "clause:nist_csf:GV.OC-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Actions", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Actions", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_compliance:Improvement Actions", "target": "clause:soc2:CC1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Data Catalog \u2014 Data Lineage", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Data Catalog \u2014 Data Lineage", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Data lineage (lineage extraction)", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Data lineage (lineage extraction)", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Data lineage (lineage extraction)", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Data lineage (lineage extraction)", "target": "clause:openlineage:RunEvent object (OpenLineage.json JSON Schema)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Data lineage (lineage extraction)", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Data Quality (data type and format rules)", "target": "clause:mitre:AML.M0007", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Data Quality (data type and format rules)", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "target": "clause:nist_pf:ID.IM-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "target": "clause:nist_pf:ID.IM-P6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "target": "clause:owasp_ai_exchange:segregatedata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Microsoft 365 Advanced Data Residency", "target": "clause:nist_pf:GV.PO-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Microsoft 365 Advanced Data Residency", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Microsoft platform encryption in transit (TLS)", "target": "clause:nist_pf:PR.DS-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Microsoft Purview \u2014 Sensitive Information Types and DLP", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Microsoft Purview \u2014 Sensitive Information Types and DLP", "target": "clause:nist_pf:CT.DP-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Microsoft Purview \u2014 Sensitive Information Types and DLP", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_purview:Purview Insider Risk Management", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:mitre_atlas:AML.T0010", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_800_53:AU-11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:GOVERN 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:GOVERN 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:GOVERN 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:GOVERN 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:GOVERN 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:MEASURE 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:nist_rmf:MEASURE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:occ_ai:Model Risk Management booklet (2021)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:oecd_ai_principles:Principle 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:omb_a_123:Section II.B", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:omb_a_123:Section IV.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_model_spec:Stay in bounds; Seek the truth together; Do the best work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_preparedness:Internal governance (\u00a75.1) \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) and Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Documented Evalu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Tracked Categories and Deploymen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74) and Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:owasp_aisvs:C9.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:owasp_aivss:AIVSS-AARS", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:pcaob_as_2201:\u00b6.39-.42", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:pcaob_as_2201:\u00b6.72-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:soc2:CC2.2 & CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:sr26_2:\u00a7VI (Model Inventory)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A1", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:mitre:AML.M0021", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:mitre:AML.M0022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:nist_rmf:GOVERN 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:nist_rmf:MAP 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:oecd_ai_principles:Principle 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:okta_financial:Okta Adaptive MFA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:okta_financial:Okta Privileged Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:omb_a_123:Section II.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:omb_a_123:Section III.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:omb_a_123:Section VI.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:openai_preparedness:Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:pcaob_as_2201:\u00b6.62-.70", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sox:\u00a7301", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sr26_2:\u00a7V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sr26_2:\u00a7V + \u00a7VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A2", "target": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A3", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A3", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A3", "target": "clause:omb_a_123:Section III.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A3", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A3", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A3", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Ongoing Evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A3", "target": "clause:pcaob_as_2201:\u00b6.14-.18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A3", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A3", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A3", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A3", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:mitre_atlas:AML.T0010", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:mitre_atlas:AML.T0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:mitre:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:mitre:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:GOVERN 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:GOVERN 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:GOVERN 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:GOVERN 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:MANAGE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:MEASURE 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:nist_rmf:MEASURE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:okta_authz:Okta Workflows \u2014 Automated Escalation Gate Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:openai_model_spec:Stay in bounds; Seek the truth together; Do the best work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:openai_model_spec:The chain of command", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:openai_preparedness:Internal governance (\u00a75.1) \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy and Autonom", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74) and Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:owasp_aisvs:C9.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:A5", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure AI certifications \u2014 ISO 27001, SOC 2, ISO 42001", "target": "clause:openai_privacy:OpenAI certifications \u2014 SOC 2, ISO 27001, ISO 42001", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure AI compliance certifications \u2014 ISO 27001, SOC 2, ISO 4", "target": "clause:nist_pf:GV.MT-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure AI compliance certifications \u2014 ISO 27001, SOC 2, ISO 4", "target": "clause:openai_privacy:OpenAI compliance certifications \u2014 SOC 2, ISO 27001, ISO 420", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure AI Foundry Observability \u2014 Operating Intent Drift Moni", "target": "clause:nist_800_53:SI-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure AI Foundry Observability \u2014 Operating Intent Drift Moni", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure AI Foundry Observability \u2014 Operating Intent Drift Moni", "target": "clause:okta_authz:Okta Behavior Detection + System Log \u2014 Sign-In Anomaly Signa", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure DevOps Required Reviewers \u2014 Multi-Party AI Deployment", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure DevOps Required Reviewers \u2014 Multi-Party AI Deployment", "target": "clause:okta_authz:Okta Workflows \u2014 Multi-Party Token Approval Chains", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure encryption \u2014 at rest and in transit", "target": "clause:nist_pf:PR.DS-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure encryption \u2014 at rest and in transit", "target": "clause:nist_pf:PR.DS-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure encryption \u2014 at rest and in transit", "target": "clause:openai_privacy:OpenAI security practices \u2014 AES-256 at rest, TLS 1.2+ in tra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Event Grid \u2014 AI Governance Policy Change Alerts", "target": "clause:nist_rmf:GOVERN 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Event Grid \u2014 AI Governance Policy Change Alerts", "target": "clause:okta_authz:Okta Event Hooks \u2014 Authorization Policy Change Notifications", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Machine Learning \u2014 Model and Data Version Tracking", "target": "clause:nist_800_53:CM-3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Machine Learning \u2014 Model and Data Version Tracking", "target": "clause:nist_rmf:MAP 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Machine Learning Model Monitoring \u2014 Knowledge Source S", "target": "clause:nist_800_53:CM-3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Machine Learning Model Monitoring \u2014 Knowledge Source S", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure PIM Emergency Access \u2014 Governed Break-Glass Activation", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure PIM Emergency Access \u2014 Governed Break-Glass Activation", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure PIM Emergency Access \u2014 Governed Break-Glass Activation", "target": "clause:okta_authz:Okta Privileged Access + Okta Workflows \u2014 Emergency Override", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Policy \u2014 AI Model Deployment Restriction and Content S", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Policy \u2014 AI Resource Provisioning Commitment Approval", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Policy \u2014 AI Resource Provisioning Commitment Approval", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Policy \u2014 AI Resource Provisioning Commitment Approval", "target": "clause:okta_authz:Okta Authorization Server \u2014 Commitment-Scoped Token Restrict", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Policy + Microsoft Purview Data Governance \u2014 Automated", "target": "clause:nist_800_53:AC-23", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Policy Compliance Dashboard \u2014 AI Workload Policy Adher", "target": "clause:nist_rmf:MEASURE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Policy Compliance Dashboard \u2014 AI Workload Policy Adher", "target": "clause:okta_authz:Okta System Log \u2014 Authorization Policy Adherence Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Policy Custom Definitions \u2014 AI Action Approval Thresho", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Policy Custom Definitions \u2014 AI Action Approval Thresho", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Policy Custom Definitions \u2014 AI Action Approval Thresho", "target": "clause:okta_authz:Okta Authorization Server \u2014 Time-Bounded Approval-Scoped Tok", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Policy Initiative Assignments \u2014 AI Policy Register Imp", "target": "clause:nist_800_53:PL-1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Policy Initiative Assignments \u2014 AI Policy Register Imp", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Policy Initiative Assignments \u2014 AI Policy Register Imp", "target": "clause:opa_rego:OPA Policy Language documentation (Rego)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure RBAC \u2014 Authority Delegation Hierarchy", "target": "clause:nist_800_53:AC-5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure RBAC \u2014 Authority Delegation Hierarchy", "target": "clause:okta_authz:Okta Authorization Server \u2014 OAuth 2.0 Delegation Constraints", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Resource Manager Policy Versioning \u2014 Automated Policy", "target": "clause:nist_800_53:CM-3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure Resource Manager Policy Versioning \u2014 Automated Policy", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure SLA + Azure Monitor \u2014 SLA Commitment Monitoring", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Azure SLA + Azure Monitor \u2014 SLA Commitment Monitoring", "target": "clause:soc2:A1.1 \u2014 Capacity management and monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:nist_rmf:MEASURE 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:soc2:PI1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F1", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F2", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F2", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F2", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F2", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F3", "target": "clause:mitre:AML.M0008", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F3", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F3", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F3", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F3", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F3", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F3", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F3", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F3", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F3", "target": "clause:soc2:PI1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:F3", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:I1", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:I1", "target": "clause:nist_rmf:MAP 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:I1", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:I1", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:I1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:I1", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:I1", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft data transfer documentation \u2014 customer TIA support", "target": "clause:openai_privacy:OpenAI DPA and security documentation \u2014 customer transfer as", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft data transfer documentation \u2014 customer TIA support", "target": "clause:uk_duaa:TIA equivalent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Defender for Cloud \u2014 AI Workload Posture and Threa", "target": "clause:nist_800_53:AU-6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Defender for Cloud \u2014 AI Workload Posture and Threa", "target": "clause:nist_rmf:MEASURE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Defender for Cloud \u2014 AI Workload Posture and Threa", "target": "clause:okta_authz:Okta System Log + Identity Governance Reports \u2014 Authority Li", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Defender for Cloud + Purview \u2014 Cross-Domain Policy", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft EU Data Boundary and Jurisdiction-Specific DPAs", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional offerings", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft EU Data Boundary and Jurisdiction-Specific DPAs", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft EU Data Boundary and Jurisdiction-Specific DPAs", "target": "clause:uk_duaa:Data protection complaints procedure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft EU Data Boundary Commitment", "target": "clause:nist_pf:ID.DE-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft EU Data Boundary Commitment", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional storage options", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft EU Data Boundary Commitment", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft EU Data Boundary Commitment", "target": "clause:uk_duaa:international transfer provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Product Terms and Data Processing Agreement", "target": "clause:mitre:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Product Terms and Data Processing Agreement", "target": "clause:mitre:AML.M0023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Product Terms and Data Processing Agreement", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Product Terms and Data Processing Agreement", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Product Terms and Data Processing Agreement", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview \u2014 Data Governance for AI Knowledge Sources", "target": "clause:nist_rmf:MAP 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview \u2014 Data Governance for AI Knowledge Sources", "target": "clause:okta_authz:Okta Fine-Grained Authorization \u2014 Knowledge Resource Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview + Azure Policy Compliance Reports \u2014 AI Gov", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (oversight, acc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Contract Obligation Audit Trail Re", "target": "clause:nist_800_53:AU-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Contract Obligation Audit Trail Re", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Contract Authorization Evid", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Contract Obligation Audit Trail Re", "target": "clause:soc2:CC7.2 \u2014 Monitoring of system components", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Principal Accountability for AI Ac", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Principal Accountability for AI Ac", "target": "clause:okta_authz:Okta Identity Tokens \u2014 Principal Identity Binding for AI Age", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Unified AI Authorization Audit Tra", "target": "clause:nist_800_53:AU-12", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Unified AI Authorization Audit Tra", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Authorization Decision Reco", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Unified AI Authorization Audit Tra", "target": "clause:soc2:CC7.2 \u2014 The entity monitors system components for anomalies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 compliance score and", "target": "clause:nist_pf:GV.MT-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 control evidence coll", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Custom Assessments fo", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence archive", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence collection a", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 regulatory assessment", "target": "clause:openai_privacy:OpenAI trust and compliance documentation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 regulatory assessment", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Regulatory Template C", "target": "clause:nist_800_53:SA-9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Structured Internal A", "target": "clause:nist_800_53:CA-7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Structured Internal A", "target": "clause:okta_authz:Okta System Log Compliance Reports \u2014 Authorization Audit Evi", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Structured Internal A", "target": "clause:soc2:CC4.1 \u2014 COSO Principle 16 \u2014 ongoing and/or separate evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Compliance Solutions \u2014 Contractual Conflic", "target": "clause:nist_800_53:SA-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Compliance Solutions \u2014 Contractual Conflic", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Data Lifecycle Management", "target": "clause:openai_privacy:OpenAI API data retention policy \u2014 30-day default", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Data Lifecycle Management", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Data Loss Prevention \u2014 generative AI app c", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Data Loss Prevention \u2014 generative AI app c", "target": "clause:nist_pf:PR.DS-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Data Loss Prevention \u2014 generative AI app c", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Data Map", "target": "clause:nist_pf:ID.IM-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Data Map", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Data Map", "target": "clause:pipl:55", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Data Map", "target": "clause:quebec_law25:3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Data Map \u2014 lineage tracking", "target": "clause:nist_pf:ID.IM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction data governan", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction data governan", "target": "clause:openai_privacy:OpenAI API log retention \u2014 30-day abuse monitoring window", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction data governan", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Information Protection \u2014 classification an", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Information Protection Classification", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Insider Risk Management \u2014 risky data-handl", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Insider Risk Management \u2014 risky data-handl", "target": "clause:nist_pf:PR.DS-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Purview Insider Risk Management \u2014 risky data-handl", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft RAI Red Team Operations \u2014 Independent Program Asse", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft RAI Red Team Operations \u2014 Independent Program Asse", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft RAI Transparency Report \u2014 Board Governance Disclos", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft RAI Transparency Report \u2014 Board Governance Disclos", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft RAI Transparency Report \u2014 Board Governance Disclos", "target": "clause:soc2:CC2.3 \u2014 Communicates with external parties", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 accountability and on", "target": "clause:nist_pf:GV.MT-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 accountability and on", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "target": "clause:nist_pf:GV.PO-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "target": "clause:nist_pf:ID.IM-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Transparency goals", "target": "clause:openai_privacy:OpenAI system cards \u2014 model behavior transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Transparency goals", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report \u2014 Systematic Le", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report + Purview \u2014 Dis", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report + Purview \u2014 Dis", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Disclosure and G", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report + Purview \u2014 Dis", "target": "clause:soc2:CC2.3 / CC7.4 \u2014 External communication and incident response", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Sentinel \u2014 AI Policy Incident Classification and S", "target": "clause:nist_800_53:IR-4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:Microsoft Sentinel \u2014 AI Policy Incident Classification and S", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS1", "target": "clause:mitre:AML.M0002", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS1", "target": "clause:mitre:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS1", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS1", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS1", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS1", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS1", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS1", "target": "clause:salesforce_trust:Data masking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:mitre_atlas:AML.T0040", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:nist_ai_600_1:MS-2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:nist_rmf:MANAGE 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:nist_rmf:MANAGE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:nist_rmf:MEASURE 2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:okta_financial:Okta access management", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:PS2", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:mitre_atlas:AML.T0010", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:mitre:AML.M0004", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:mitre:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:mitre:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:mitre:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:nist_rmf:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:nist_rmf:MANAGE 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:nist_rmf:MANAGE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:openai_model_spec:Stay in bounds (prohibited sexual content involving minors);", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:pcaob_as_2201:\u00b6.39", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:soc2:CC6.6, CC6.7, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS1", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:mitre_atlas:ATLAS tactics and techniques (framework-wide)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:mitre:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:nist_ai_600_1:2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:nist_rmf:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:nist_rmf:MANAGE 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:okta_financial:Okta Privileged Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:owasp_ai_exchange:anomalousinputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:pcaob_as_2201:\u00b6.39-.40", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:salesforce_trust:Secure data retrieval, dynamic grounding, and toxicity detec", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:salesforce_trust:Toxicity detection \u2014 output scoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:soc2:CC6.1, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:soc2:CC7.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:soc2:CC7.4, CC7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:sox:\u00a7302(a)(5)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:sox:\u00a7404(a)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:sr26_2:\u00a7V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS2", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:mitre_atlas:AML.T0012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:mitre_atlas:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:nist_ai_600_1:MS-2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:nist_rmf:MEASURE 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:openai_model_spec:Stay in bounds (prohibited sexual content involving minors);", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:openai_preparedness:Building trust (\u00a75) \u2014 framework iteration and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Sandbagging and Long-range Auto", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:RS3", "target": "clause:sr26_2:\u00a7V (Outcomes Analysis)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:mitre:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:nist_ai_600_1:2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:nist_rmf:MEASURE 2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T1", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:nist_rmf:MAP 5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:nist_rmf:MEASURE 2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:okta_financial:Okta System Log", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:omb_a_123:Section VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:pcaob_as_2201:\u00b6.20", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:pcaob_as_2201:\u00b6.68-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:sec_ai:Proposed rule, Release 34-97990 (withdrawn 2025-06-12)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:soc2:CC2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:sox:\u00a7302(a)(4)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T2", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:nist_rmf:GOVERN 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:oecd_ai_principles:Principle 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:soc2:P1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:un_ethics_ai:\u00b635\u2013\u00b636 (Human oversight and determination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:un_ethics_ai:\u00b637 (Transparency)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:microsoft_rai:T3", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0004", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0004", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0004", "target": "clause:owasp_aisvs:C12.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0004", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0004", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0004", "target": "clause:owasp_llm10:LLM10:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0005", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0005", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0005", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0005", "target": "clause:owasp_aisvs:C8.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0005", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0005", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0012", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0012", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0012", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0012", "target": "clause:owasp_aisvs:C8.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0012", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0012", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0013", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0013", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0013", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0013", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0013", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0013", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0013", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0013", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0013", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:owasp_aisvs:C10.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0014", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0015", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0015", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0015", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0015", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0015", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0015", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0015", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0015", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0015", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0015", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0015", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0015", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0018", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0018", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0018", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0018", "target": "clause:owasp_ai_exchange:seceducate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0018", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0018", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0018", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0018", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0020", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0020", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0020", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0020", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0020", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0020", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0020", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0020", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0024", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0024", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0024", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0024", "target": "clause:owasp_aisvs:C12.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0024", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0024", "target": "clause:owasp_aisvs:C12.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0024", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0024", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0024", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0024", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0024", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0024", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0026", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0026", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0026", "target": "clause:owasp_aisvs:C5.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0026", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0026", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0026", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0026", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0026", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0026", "target": "clause:owasp_aisvs:C9.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0026", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0026", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0027", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0027", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0027", "target": "clause:owasp_aisvs:C5.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0027", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0027", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0027", "target": "clause:owasp_aisvs:C9.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0027", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0028", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0029", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0029", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0029", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0029", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0029", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0029", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0029", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_aisvs:C2.1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_aisvs:C8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_aisvs:C8.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_aisvs:C8.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_aisvs:C9.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0030", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:owasp_aisvs:C8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:owasp_aisvs:C8.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:owasp_aisvs:C8.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:owasp_aisvs:C9.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0031", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0032", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0032", "target": "clause:owasp_aisvs:C4.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0032", "target": "clause:owasp_aisvs:C4.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0032", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0032", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_aisvs:C10.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_aisvs:C9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.M0033", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0010", "target": "clause:nist_rmf:GOVERN 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0010", "target": "clause:nist_rmf:GOVERN 6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0010", "target": "clause:owasp_aisvs:C9.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0010", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0012", "target": "clause:nist_ai_600_1:MS-2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0012", "target": "clause:nist_rmf:GOVERN 4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0012", "target": "clause:nist_rmf:MANAGE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0012", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0012", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy and Autonom", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0012", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0012", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0018", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0018", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0018", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0018", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0018", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0024", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0024", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0024", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0024", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0024", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0024", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0024", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0024", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0024", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0024", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0025", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0025", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0025", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0025", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0034.002", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0034.002", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0034.002", "target": "clause:owasp_aisvs:C12.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0034.002", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0034.002", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0034.002", "target": "clause:owasp_llm10:LLM10:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0040", "target": "clause:nist_rmf:MEASURE 2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:nist_ai_600_1:2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:owasp_ai_exchange:anomalousinputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:owasp_aisvs:C2.1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:salesforce_trust:Secure data retrieval, dynamic grounding, and toxicity detec", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0051", "target": "clause:salesforce_trust:Toxicity detection \u2014 output scoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0053", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0056", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0056", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0056", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0056", "target": "clause:owasp_aisvs:C8.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0056", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0056", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0057", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0057", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0057", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0057", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0057", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0057", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0057", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0066", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0066", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0066", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0066", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0066", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0066", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0066", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0066", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0066", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0070", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0070", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0070", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0070", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0070", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0070", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0070", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0070", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0070", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0070", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0070", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0070", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_aisvs:C2.1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_aisvs:C8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_aisvs:C8.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_aisvs:C8.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_aisvs:C9.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0080", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0081", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0081", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0081", "target": "clause:owasp_aisvs:C10.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0081", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0081", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0081", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0081", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0081", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0086", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0086", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0086", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0086", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0086", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0086", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0086", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0086", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0086", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0086", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0086", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0086", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0098", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0098", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0098", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0098", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0098", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0098", "target": "clause:owasp_aisvs:C8.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0098", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0098", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0098", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0098", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0098", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0098", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0099", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0099", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0099", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0099", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0099", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0099", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0099", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0099", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0099", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0100", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0100", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0100", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0100", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0100", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0100", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0100", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0100", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0100", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0101", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0101", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0101", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0101", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0101", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0101", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0101", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0104", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0104", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0104", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0104", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0104", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0104", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0104", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0104", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0104", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0104", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0104", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0104", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0105", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0105", "target": "clause:owasp_aisvs:C4.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0105", "target": "clause:owasp_aisvs:C4.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0105", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:AML.T0105", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre_atlas:ATLAS tactics and techniques (framework-wide)", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0000", "target": "clause:ms_ifc_agents:Confidentiality label read-access list ({Alice, Bob, Charlie", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0000", "target": "clause:nist_pf:PR.AC-P4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0000", "target": "clause:owasp_ai_exchange:discrete", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0001", "target": "clause:ms_ifc_agents:Confidentiality label read-access list ({Alice, Bob, Charlie", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0001", "target": "clause:nist_pf:PR.AC-P4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0001", "target": "clause:owasp_ai_exchange:discrete", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:owasp_aisvs:C7.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:owasp_aisvs:C7.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0002", "target": "clause:salesforce_trust:Data masking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0004", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0004", "target": "clause:nist_rmf:MANAGE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0004", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0004", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0004", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0004", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0004", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0004", "target": "clause:owasp_aisvs:C11.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0004", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0004", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0004", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0007", "target": "clause:nist_ai_100_2:NISTAML.012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0007", "target": "clause:nist_ai_100_2:NISTAML.013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0007", "target": "clause:nist_rmf:MAP-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0007", "target": "clause:nist_rmf:MEASURE-2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0007", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0007", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0007", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0007", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0007", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0007", "target": "clause:owasp_aitg:AITG-MOD-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0007", "target": "clause:owasp_ml_top10:ML02:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0007", "target": "clause:snowflake_horizon:Data Quality Monitoring (data metric functions)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0007", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_ai_100_2:NISTAML.022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_ai_600_1:CONFABULATION", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_ai_600_1:HUMAN-AI-CONFIG", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_rmf:MANAGE-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_rmf:MAP 2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_rmf:MEASURE 2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_rmf:MEASURE-2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_rmf:MEASURE-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_rmf:MEASURE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_rmf:MEASURE-2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:owasp_aisvs:C11.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:owasp_aisvs:C11.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:owasp_aisvs:C3.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:owasp_aitg:AITG-APP-10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:owasp_aitg:AITG-MOD-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0008", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0009", "target": "clause:owasp_ai_exchange:anomalousinputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0009", "target": "clause:owasp_ai_exchange:evasioninputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0009", "target": "clause:owasp_aisvs:C2.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0009", "target": "clause:owasp_aisvs:C2.1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0009", "target": "clause:owasp_aisvs:C2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0009", "target": "clause:owasp_aisvs:C2.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0009", "target": "clause:owasp_aisvs:C2.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0010", "target": "clause:owasp_ai_exchange:anomalousinputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0010", "target": "clause:owasp_ai_exchange:evasioninputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0010", "target": "clause:owasp_aisvs:C2.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0010", "target": "clause:owasp_aisvs:C2.1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0010", "target": "clause:owasp_aisvs:C2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0010", "target": "clause:owasp_aisvs:C2.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0010", "target": "clause:owasp_aisvs:C2.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:mitre_atlas:AML.M0013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:mitre_atlas:AML.T0099", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:nist_pf:ID.DE-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:nist_rmf:GOVERN-6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:nist_rmf:MAP-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:nist_rmf:MAP-4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:openlineage:RunEvent object (OpenLineage.json JSON Schema)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C3.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C6.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_ml_top10:ML06:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0014", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:mitre_atlas:AML.M0020", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:mitre_atlas:AML.M0030", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:mitre_atlas:AML.T0080", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:nist_ai_600_1:2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_ai_exchange:anomalousinputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_ai_exchange:evasioninputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C10.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C2.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C2.1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C2.1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C2.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C2.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_aitg:AITG-APP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0015", "target": "clause:salesforce_trust:Secure data retrieval, dynamic grounding, and toxicity detec", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0018", "target": "clause:mitre_atlas:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0018", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0018", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0018", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0018", "target": "clause:owasp_ai_exchange:seceducate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0018", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0018", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0018", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0018", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:mitre_atlas:AML.M0026", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:mitre_atlas:AML.M0027", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:mitre_atlas:AML.M0029", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:mitre_atlas:AML.T0101", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_aisvs:C12.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_aisvs:C5.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_aisvs:C9.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0019", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:mitre_atlas:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:mitre_atlas:AML.T0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:mitre_atlas:AML.T0057", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:mitre_atlas:AML.T0086", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_ai_100_2:NISTAML.037", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_ai_100_2:NISTAML.038", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_pf:CT.DP-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_pf:CT.DP-P2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_pf:CT.DP-P3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_pf:PR.DS-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_rmf:AI RMF: Govern, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:nist_rmf:GOVERN-3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:openai_model_spec:The chain of command", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:openai_privacy:OpenAI usage policies \u2014 restricted inference uses", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_ai_exchange:seceducate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C7.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C9.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_aitg:AITG-APP-13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:salesforce_trust:Data masking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0020", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0021", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0021", "target": "clause:nist_rmf:MAP 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0021", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0022", "target": "clause:nist_rmf:GOVERN 1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0022", "target": "clause:nist_rmf:MAP 1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0022", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:mitre_atlas:AML.M0013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:mitre_atlas:AML.M0014", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:mitre_atlas:AML.M0033", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:mitre_atlas:AML.T0099", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:mitre_atlas:AML.T0104", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:nist_pf:ID.DE-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:nist_rmf:GOVERN-6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:nist_rmf:MAP-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:nist_rmf:MAP-4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:openlineage:RunEvent object (OpenLineage.json JSON Schema)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C3.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C6.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_ml_top10:ML06:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0023", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:mitre_atlas:AML.M0024", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:mitre_atlas:AML.T0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:mitre_atlas:AML.T0051", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:nist_ai_600_1:2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:nist_pf:CT.DM-P8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:nist_pf:PR.DS-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:nist_rmf:MEASURE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aisvs:C11.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aisvs:C12.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aisvs:C12.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aisvs:C12.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aisvs:C9.3.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:salesforce_trust:Toxicity detection \u2014 output scoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0024", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:nist_rmf:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:nist_rmf:GOVERN-1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:nist_rmf:MANAGE 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_aitg:AITG-APP-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0026", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:nist_rmf:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:nist_rmf:GOVERN-1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:nist_rmf:MANAGE 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_aitg:AITG-APP-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0027", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:mitre_atlas:AML.M0015", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:mitre_atlas:AML.M0028", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:mitre_atlas:AML.T0053", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:mitre_atlas:AML.T0098", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:nist_rmf:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:nist_rmf:GOVERN-1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:nist_rmf:MANAGE 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_aitg:AITG-APP-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0028", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:mitre_atlas:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:nist_rmf:AI RMF: Govern, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:nist_rmf:GOVERN-3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:openai_model_spec:The chain of command", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_ai_exchange:seceducate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_aisvs:C7.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_aisvs:C7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_aisvs:C9.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_aitg:AITG-APP-13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0029", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:mitre_atlas:AML.M0018", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:nist_rmf:AI RMF: Govern", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:nist_rmf:AI RMF: Govern, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:nist_rmf:GOVERN-3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:openai_model_spec:The chain of command", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_ai_exchange:seceducate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_aisvs:C7.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_aisvs:C7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_aisvs:C9.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_aitg:AITG-APP-13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.M0030", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0010", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0010", "target": "clause:nist_rmf:GOVERN-6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0010", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0010", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0010", "target": "clause:owasp_ml_top10:ML06:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0010", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0018", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0018", "target": "clause:nist_ai_600_1:DATA-PRIVACY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0018", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0018", "target": "clause:nist_rmf:GOVERN-6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0018", "target": "clause:nist_rmf:MAP-4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0018", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0018", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0018", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0018", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0018", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0018", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:nist_ai_100_2:NISTAML.012", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:nist_ai_100_2:NISTAML.013", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:nist_rmf:MAP-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:nist_rmf:MEASURE-2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:owasp_aitg:AITG-MOD-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:owasp_ml_top10:ML02:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0020", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0024", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0024", "target": "clause:nist_rmf:MEASURE-2.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0024", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0024", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0024", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0024", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0043", "target": "clause:nist_ai_600_1:CBRN", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0043", "target": "clause:nist_ai_600_1:CONFABULATION", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0043", "target": "clause:nist_rmf:MANAGE-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0043", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0043", "target": "clause:nist_rmf:MEASURE-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0043", "target": "clause:nist_rmf:MEASURE-2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0043", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0043", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0043", "target": "clause:owasp_aitg:AITG-INF-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0043", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0043", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0044", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0044", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0044", "target": "clause:nist_rmf:GOVERN-4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0044", "target": "clause:nist_rmf:MANAGE-2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0044", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0044", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0044", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0044", "target": "clause:owasp_aitg:AITG-MOD-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0044", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0044", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0051", "target": "clause:nist_ai_100_2:NISTAML.022", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0051", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0051", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0051", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0051", "target": "clause:owasp_aitg:AITG-MOD-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:mitre:AML.T0051", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "target": "clause:nist_rmf:GOVERN 3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "target": "clause:nist_pf:ID.IM-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Confidentiality label read-access list ({Alice, Bob, Charlie", "target": "clause:nist_pf:PR.AC-P4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Confidentiality label read-access list ({Alice, Bob, Charlie", "target": "clause:owasp_ai_exchange:discrete", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "target": "clause:nist_ai_600_1:2.9", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "target": "clause:owasp_aisvs:C10.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "target": "clause:owasp_aisvs:C9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ms_ifc_agents:Propagate labels \u2014 labels travel with derivative results as", "target": "clause:nist_pf:CT.PO-P1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "target": "clause:nist_rmf:AI RMF: Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "target": "clause:owasp_aisvs:C11.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:\u00a72.1.1", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:\u00a72.1.2", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:\u00a72.1.3", "target": "clause:nist_csf:ID.IM-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:\u00a72.1.3", "target": "clause:nist_csf:RC.RP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:\u00a72.1.3", "target": "clause:nist_csf:RC.RP-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:\u00a72.1.3", "target": "clause:nist_sp800_34:\u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:\u00a72.1.3", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:\u00a72.2", "target": "clause:nist_csf:GV.OC-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:\u00a73.2", "target": "clause:nist_csf:GV.OV-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:\u00a73.2", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:\u00a73.2", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a75.1 Internal governanc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:Appendix D", "target": "clause:nist_csf:ID.AM-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:Appendix D", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_160_v2:Appendix D", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical capability levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AC-5", "target": "clause:nist_rmf:GOVERN 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AC-5", "target": "clause:nist_rmf:GOVERN 2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AC-5", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AC-5", "target": "clause:okta_authz:Okta Authorization Server \u2014 Commitment-Scoped Token Restrict", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AC-5", "target": "clause:okta_authz:Okta Authorization Server \u2014 OAuth 2.0 Delegation Constraints", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AC-5", "target": "clause:okta_authz:Okta Authorization Server \u2014 Time-Bounded Approval-Scoped Tok", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AC-5", "target": "clause:okta_authz:Okta Workflows \u2014 Multi-Party Token Approval Chains", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AC-5", "target": "clause:openai_preparedness:OpenAI Usage Policies \u2014 Permitted Use and Representation Gov", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AU-11", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Documented Evalu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AU-12", "target": "clause:okta_authz:Okta System Log \u2014 Identity-Mediated Procurement Authorizatio", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AU-12", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Authorization Decision Reco", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AU-12", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Contract Authorization Evid", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AU-12", "target": "clause:soc2:CC7.2 \u2014 Detection and Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AU-12", "target": "clause:soc2:CC7.2 \u2014 Monitoring of system components", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AU-12", "target": "clause:soc2:CC7.2 \u2014 The entity monitors system components for anomalies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AU-6", "target": "clause:nist_rmf:MEASURE 3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:AU-6", "target": "clause:okta_authz:Okta System Log + Identity Governance Reports \u2014 Authority Li", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:CA-2", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:CA-7", "target": "clause:okta_authz:Okta System Log Compliance Reports \u2014 Authorization Audit Evi", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:CA-7", "target": "clause:soc2:CC4.1 \u2014 COSO Principle 16 \u2014 ongoing and/or separate evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:CA-7", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:CM-3", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:CM-3", "target": "clause:nist_rmf:MAP 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:CM-3", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:IR-4", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:IR-4", "target": "clause:nist_rmf:MANAGE 4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:IR-4", "target": "clause:okta_authz:Okta Privileged Access + Okta Workflows \u2014 Emergency Override", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:IR-4", "target": "clause:okta_authz:Okta Workflows \u2014 Automated Escalation Gate Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:PL-1", "target": "clause:nist_rmf:GOVERN 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:PL-1", "target": "clause:opa_rego:OPA Policy Language documentation (Rego)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:RA-5", "target": "clause:nist_csf:ID.RA-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:RA-5", "target": "clause:nist_csf:ID.RA-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:SA-4", "target": "clause:nist_rmf:GOVERN 2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:SA-4", "target": "clause:nist_rmf:MAP 1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:SA-4", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:SA-4", "target": "clause:soc2:A1.1 \u2014 Capacity management and monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:SA-9", "target": "clause:oecd_cg:II.F / IV.A \u2014 Related party transactions \u2014 approval and disc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:SA-9", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:SI-2", "target": "clause:nist_csf:ID.RA-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:SI-2", "target": "clause:nist_csf:ID.RA-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:SI-7", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:SI-7", "target": "clause:okta_authz:Okta Behavior Detection + System Log \u2014 Sign-In Anomaly Signa", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:SI-7", "target": "clause:okta_authz:Okta for AI Agents \u2014 Scoped Token Authorization", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_53:SI-7", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Research Categories (Long-Range", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4", "target": "clause:nist_zt:Tenet 1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4", "target": "clause:okta_iam:Okta for AI Agents \u2014 Agent Registry", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4", "target": "clause:okta_iam:Okta for AI Agents \u2014 Capability Manifest", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4", "target": "clause:okta_iam:Okta for AI Agents \u2014 Owner Binding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4", "target": "clause:okta_iam:Okta Universal Directory \u2014 Human NHI Separation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4", "target": "clause:owasp_nhi10:NHI1:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4", "target": "clause:scim:RFC 7643 \u00a74.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4", "target": "clause:scim:RFC 7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4 \u00a73", "target": "clause:okta_iam:Okta Identity Governance \u2014 Governance Structure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4 \u00a73", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 'Building trust' public disclosu", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4 \u00a73", "target": "clause:ping_identity:Ping Identity for AI \u2014 Governance Capabilities", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "target": "clause:nist_zt:\u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "target": "clause:okta_iam:Okta for AI Agents \u2014 Assurance Levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 safeguards for High-capability d", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4 \u00a73.4.4", "target": "clause:okta_iam:Okta Identity Governance \u2014 Attestation Evidence", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4 \u00a73.4.4", "target": "clause:openai_sf:OpenAI Enterprise Compliance API \u2014 audit and auth log export", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4 \u00a73.4.4", "target": "clause:openid:RFC 9396", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63-4 \u00a73.4.4", "target": "clause:w3c_did:\u00a75.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63A-4", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 Provisioning Gate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63A-4", "target": "clause:okta_iam:Okta OAuth \u2014 User Consent Framework", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63A-4", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63A-4", "target": "clause:owasp_nhi10:NHI2:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63A-4", "target": "clause:owasp_nhi10:NHI5:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63A-4", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core provisioning gate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63A-4", "target": "clause:scim:RFC7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63A-4", "target": "clause:spiffe_spire:SVID \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4", "target": "clause:nist_zt:\u00a73.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4", "target": "clause:okta_iam:Okta \u2014 Multi Region Resilience", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4", "target": "clause:okta_iam:Okta Cross App Access \u2014 Identity Assertion Authorization Gra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4", "target": "clause:okta_iam:Okta for AI Agents \u2014 Minimum Privilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4", "target": "clause:okta_iam:Okta Privileged Access \u2014 Break Glass", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4", "target": "clause:openid:RFC 9396 \u00a76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a73", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a73", "target": "clause:nist_zt:Tenet 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a73", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a73", "target": "clause:okta_iam:Okta \u2014 Concurrent Session Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a73", "target": "clause:okta_iam:Okta ISPM \u2014 Credential Exposure Scanning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a73", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Anomalous Auth Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a73", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Machine Identity Baseline", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a73", "target": "clause:ping_identity:PingOne Credentials \u2014 Verifiable Credentials", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a74", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a74", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a74", "target": "clause:nist_zt:Tenet 5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a74", "target": "clause:okta_iam:Okta Adaptive MFA \u2014 Impossible Travel Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a74", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 Deprovisioning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a74", "target": "clause:okta_iam:Okta OAuth \u2014 Token Revocation Propagation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a74", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a74", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent Gateway revocation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63B-4 \u00a74", "target": "clause:scim:RFC7644 \u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:nist_zt:Tenet 4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:nist_zt:Tenet 6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:oauth_bcp:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:oauth_bcp:\u00a72.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:oidc_federation:\u00a79", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:okta_iam:Okta Authorization Server \u2014 Scope Boundary Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:okta_iam:Okta Cross App Access \u2014 task-scoped resource tokens (RFC 869", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:okta_iam:Okta OIDC \u2014 Dynamic Client Registration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:okta_iam:Okta Universal Directory \u2014 Federation Trust Config", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:openid:RFC 9396", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:ping_identity:Ping Identity \u2014 Cross Organization Agent Auth", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core delegation chain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Delegation Depth Limit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Trust Framework", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:ping_identity:PingFederate \u2014 OIDC Audience Validation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:ping_identity:PingFederate \u2014 Scope Reduction Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:ping_identity:PingOne Credentials \u2014 eIDAS 2.0-aligned verifiable credentia", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:ping_identity:PingOne Credentials \u2014 W3C Verifiable Credentials / DID", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:w3c_did:\u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a72", "target": "clause:w3c_did:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a73.15", "target": "clause:nist_zt:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a73.15", "target": "clause:nist_zt:Tenet 3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a73.15", "target": "clause:okta_iam:Okta OAuth \u2014 DPoP token binding (RFC 9449)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a73.15", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a73.15", "target": "clause:openid:RFC 9449", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a73.5", "target": "clause:okta_iam:Okta trust page (trust.okta.com) \u2014 third-party audit certifi", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a73.5", "target": "clause:openid:OpenID Connect Core 1.0 \u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a73.5", "target": "clause:ping_identity:Ping Identity \u2014 Federated Cross Org Authorization", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_800_63:SP 800-63C-4 \u00a73.5", "target": "clause:ping_identity:Ping Identity compliance certifications (SOC 2 Type II, ISO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.012", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.012", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.012", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.012", "target": "clause:owasp_aitg:AITG-MOD-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.012", "target": "clause:owasp_ml_top10:ML02:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.012", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.013", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.013", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.013", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.013", "target": "clause:owasp_aitg:AITG-MOD-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.013", "target": "clause:owasp_ml_top10:ML02:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.013", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.021", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.021", "target": "clause:owasp_ml_top10:ML10:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.022", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.022", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.022", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.022", "target": "clause:owasp_aitg:AITG-MOD-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.022", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.023", "target": "clause:nist_rmf:MANAGE-4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.023", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.023", "target": "clause:owasp_aitg:AITG-INF-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.023", "target": "clause:owasp_ml_top10:ML10:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.032", "target": "clause:owasp_ai_exchange:modelobfuscation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.032", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.032", "target": "clause:owasp_aisvs:C11.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.032", "target": "clause:owasp_ml_top10:ML03:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.037", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.037", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.038", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.038", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:nist_pf:ID.DE-P5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:nist_rmf:AI RMF: Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:nist_rmf:GOVERN-6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:nist_rmf:MAP-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:nist_rmf:MAP-4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:openlineage:RunEvent object (OpenLineage.json JSON Schema)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C3.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C6.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_ml_top10:ML06:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_100_2:NISTAML.05", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.4", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.4", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.4", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.4", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.4", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.4", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.4", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.4", "target": "clause:salesforce_trust:Data masking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.4", "target": "clause:salesforce_trust:Toxicity detection \u2014 output scoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.8", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.8", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.8", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.8", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.8", "target": "clause:salesforce_trust:Secure data retrieval, dynamic grounding, and toxicity detec", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:nist_rmf:MANAGE 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:nist_rmf:MANAGE 4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:owasp_ai_exchange:anomalousinputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:2.9", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:CBRN", "target": "clause:nist_rmf:MEASURE-2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:CBRN", "target": "clause:owasp_aitg:AITG-INF-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:CONFABULATION", "target": "clause:nist_rmf:MEASURE-2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:CONFABULATION", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:CONFABULATION", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:CONFABULATION", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:DATA-PRIVACY", "target": "clause:nist_rmf:GOVERN-1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:DATA-PRIVACY", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:DATA-PRIVACY", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:DATA-PRIVACY", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:HUMAN-AI-CONFIG", "target": "clause:nist_rmf:MEASURE-2.11", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:HUMAN-AI-CONFIG", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:HUMAN-AI-CONFIG", "target": "clause:owasp_aitg:AITG-APP-10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:HUMAN-AI-CONFIG", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:INFO-INTEGRITY", "target": "clause:nist_rmf:GOVERN-1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:INFO-INTEGRITY", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:INFO-SECURITY", "target": "clause:nist_rmf:MEASURE-2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:INFO-SECURITY", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:INFO-SECURITY", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:INFO-SECURITY", "target": "clause:owasp_aitg:AITG-MOD-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:INFO-SECURITY", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:MS-2.5", "target": "clause:nist_rmf:MANAGE 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:MS-2.5", "target": "clause:nist_rmf:MEASURE 2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:MS-2.5", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_ai_600_1:MS-2.5", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.OC-01", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.OC-03", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.OC-03", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.OC-03", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.OC-03", "target": "clause:openai_policies:Data residency commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.OC-03", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.OC-03", "target": "clause:soc2:A1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.OC-03", "target": "clause:soc2:CC1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.OC-04", "target": "clause:nist_sp800_34:\u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.OV-01", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.OV-01", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a75.1 Internal governanc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.OV-03", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.OV-03", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Capabilities and Safeguards Repor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.PO", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.PO-01", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.PO-01", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.RR", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.RR", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.RR-02", "target": "clause:nist_sp800_34:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.RR-02", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.RR-02", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 leadership risk ownership", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.SC-07", "target": "clause:nist_sp800_34:\u00a72.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:GV.SC-07", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:ID.AM-01", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:ID.AM-01", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:ID.AM-01", "target": "clause:soc2:CC6.1, CC7.1, CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:ID.AM-05", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:ID.AM-05", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical capability levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:ID.IM-02", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:ID.IM-03", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:ID.IM-04", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:ID.IM-04", "target": "clause:nist_sp800_34:\u00a74.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:ID.RA-01", "target": "clause:okta_governance:Access certification", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:ID.RA-01", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:PR.DS-01", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:PR.DS-01", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RC.RP", "target": "clause:nist_sp800_34:\u00a74.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RC.RP-01", "target": "clause:nist_sp800_34:\u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RC.RP-01", "target": "clause:nist_sp800_34:\u00a73.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RC.RP-01", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RC.RP-01", "target": "clause:nist_sp800_34:\u00a73.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RC.RP-01", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard decisions affecting deployed mod", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RC.RP-01", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RC.RP-02", "target": "clause:nist_sp800_34:\u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RC.RP-02", "target": "clause:nist_sp800_34:\u00a73.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RC.RP-02", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RC.RP-03", "target": "clause:nist_sp800_34:\u00a73.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RC.RP-05", "target": "clause:nist_sp800_34:\u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RS.AN", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RS.AN", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RS.CO", "target": "clause:okta_governance:Audit reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RS.CO", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RS.MI", "target": "clause:okta_governance:Workflows", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_csf:RS.MI", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DM-P4", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DM-P6", "target": "clause:okta_iam:Okta Universal Directory \u2014 profile export APIs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DM-P6", "target": "clause:openai_privacy:OpenAI API \u2014 customer data export", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DM-P7", "target": "clause:okta_iam:Okta Workflows \u2014 event-driven lifecycle automation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DM-P7", "target": "clause:openai_privacy:OpenAI API data controls \u2014 retention and training configurat", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DM-P8", "target": "clause:okta_iam:Okta System Log \u2014 real-time audit events", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DM-P8", "target": "clause:openai_privacy:OpenAI API log retention \u2014 30-day abuse monitoring window", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DM-P8", "target": "clause:openai_privacy:OpenAI privacy request records", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DM-P8", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DM-P8", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DP-P1", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DP-P1", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DP-P2", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DP-P2", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DP-P3", "target": "clause:openai_privacy:OpenAI usage policies \u2014 restricted inference uses", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.DP-P3", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.PO-P1", "target": "clause:okta_iam:Okta API Access Management \u2014 OAuth scopes and consent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.PO-P1", "target": "clause:okta_iam:Okta real-time directory synchronization \u2014 consent state pro", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.PO-P1", "target": "clause:openai_privacy:OpenAI API usage monitoring \u2014 data control configuration aud", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.PO-P1", "target": "clause:openai_privacy:OpenAI Enterprise Privacy \u2014 customer responsibility for lawf", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.PO-P1", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:CT.PO-P2", "target": "clause:owasp_ai_exchange:segregatedata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:GV.MT-P1", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:GV.MT-P3", "target": "clause:openai_privacy:OpenAI compliance certifications \u2014 SOC 2, ISO 27001, ISO 420", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:GV.PO-P1", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:GV.PO-P5", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:ID.DE-P3", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional storage options", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:ID.DE-P3", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:ID.DE-P3", "target": "clause:uk_duaa:international transfer provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:ID.DE-P5", "target": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:ID.DE-P5", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:ID.IM-P1", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:ID.IM-P1", "target": "clause:pipl:55", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:ID.IM-P1", "target": "clause:quebec_law25:3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:ID.IM-P5", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:ID.IM-P6", "target": "clause:owasp_ai_exchange:segregatedata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:PR.AC-P4", "target": "clause:owasp_ai_exchange:discrete", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:PR.AC-P6", "target": "clause:okta_iam:Okta Universal Directory and authentication policies \u2014 ident", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:PR.DS-P1", "target": "clause:openai_privacy:OpenAI security practices \u2014 AES-256 at rest, TLS 1.2+ in tra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:PR.DS-P2", "target": "clause:openai_privacy:OpenAI security practices \u2014 AES-256 at rest, TLS 1.2+ in tra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:PR.DS-P5", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:PR.DS-P5", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_pf:PR.DS-P6", "target": "clause:owasp_ai_exchange:runtimemodeliointegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:\u00a73.2", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:\u00a73.2", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:\u00a73.4", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:\u00a73.4", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:\u00a73.4", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:\u00a73.4", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_ai_exchange:seceducate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Manage", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Manage", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Manage", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Manage", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Manage", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Manage", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Manage", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Manage", "target": "clause:owasp_aisvs:C9.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Manage", "target": "clause:owasp_aisvs:C9.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Manage", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Manage", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Manage", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Map", "target": "clause:owasp_aisvs:C9.2.10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Map", "target": "clause:owasp_aisvs:C9.5.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Map", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Measure", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Measure", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Measure", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Measure", "target": "clause:owasp_aisvs:C7.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Measure", "target": "clause:owasp_aisvs:C7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern, Measure", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C10.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C11.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C12.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C12.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C12.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C2.1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C3.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C3.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C4.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C4.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C5.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C7.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C7.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C8.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C8.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C8.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.3.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.5.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_llm10:LLM10:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Manage", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map", "target": "clause:owasp_aisvs:C3.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_aisvs:C3.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_aisvs:C6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_aisvs:C6.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Manage", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Measure", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Measure", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Measure", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Measure", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Measure", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Measure", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Measure", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Map, Measure", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure", "target": "clause:owasp_aisvs:C11.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure", "target": "clause:owasp_aisvs:C12.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure", "target": "clause:owasp_aisvs:C12.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_aisvs:C10.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_aisvs:C11.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_aisvs:C3.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_aisvs:C9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:AI RMF: Measure, Manage", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.1", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.1", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.1", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.1", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.2", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.2", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.2", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.2", "target": "clause:opa_rego:OPA Policy Language documentation (Rego)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.2", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.2", "target": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.2", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Tracked Categories and Deploymen", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.2", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.2", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.2", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.2", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.2", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.3", "target": "clause:oecd_ai_principles:Principle 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.3", "target": "clause:okta_authz:Okta Authorization Server \u2014 Time-Bounded Approval-Scoped Tok", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.3", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.4", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.4", "target": "clause:okta_authz:Okta Authorization Server \u2014 Signed Token Claims as Authoriza", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.4", "target": "clause:okta_authz:Okta Event Hooks \u2014 Authorization Policy Change Notifications", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.4", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 System Cards and Safeguards Repo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.4", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.4", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74) and Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.4", "target": "clause:soc2:CC3.1 \u2014 COSO Principle 6 \u2014 Specifies suitable objectives", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.5", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.6", "target": "clause:owasp_aisvs:C9.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.6", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.7", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review and", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 1.7", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 2.1", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 2.1", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 2.1", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 2.1", "target": "clause:openai_preparedness:Internal governance (\u00a75.1) \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 2.1", "target": "clause:openai_preparedness:OpenAI Usage Policies \u2014 Permitted Use and Representation Gov", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 2.1", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 2.1", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 2.1", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 2.1", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 2.3", "target": "clause:okta_authz:Okta Authorization Server \u2014 Commitment-Scoped Token Restrict", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 2.3", "target": "clause:openai_preparedness:Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 2.3", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Ongoing Evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 3.2", "target": "clause:openai_model_spec:The chain of command", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 3.2", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 3.2", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 3.2", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 3.2", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 3.2", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 3.2", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 4.1", "target": "clause:oecd_ai_principles:Principle 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 4.1", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 4.1", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 4.2", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 4.2", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 4.2", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 4.2", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 4.2", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 4.2", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 4.2", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 4.3", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 6.1", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN 6.1", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.1", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.1", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.1", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.1", "target": "clause:owasp_aisvs:C1.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.1", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.1", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.1", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.2", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.2", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.2", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.2", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.2", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.3", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.3", "target": "clause:owasp_aitg:AITG-APP-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-1.4", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-2.1", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-2.1", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-2.1", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-2.3", "target": "clause:owasp_ai_exchange:aiprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-2.3", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-3.2", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-3.2", "target": "clause:owasp_aitg:AITG-APP-13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-3.2", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-4.2", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-4.2", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-4.3", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-4.3", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-6.1", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-6.1", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-6.1", "target": "clause:owasp_ml_top10:ML06:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:GOVERN-6.1", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 1.2", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 1.3", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 1.3", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 1.3", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 2.4", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 2.4", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 2.4", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 3.1", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy and Autonom", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 3.1", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 3.1", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.1", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.1", "target": "clause:okta_authz:Okta Workflows \u2014 Automated Escalation Gate Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.1", "target": "clause:openai_preparedness:Building trust (\u00a75) \u2014 framework iteration and transparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.1", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.1", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.1", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.1", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.1", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.1", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.1", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.1", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.3", "target": "clause:okta_authz:Okta Privileged Access + Okta Workflows \u2014 Emergency Override", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.3", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE 4.3", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-1.1", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-1.1", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-1.1", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-2.4", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-2.4", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-2.4", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-2.4", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-2.4", "target": "clause:owasp_aitg:AITG-MOD-02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-2.4", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-2.4", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-4.1", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-4.1", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-4.1", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-4.1", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-4.1", "target": "clause:owasp_ai_exchange:secprogram", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-4.1", "target": "clause:owasp_aitg:AITG-APP-14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-4.1", "target": "clause:owasp_aitg:AITG-INF-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MANAGE-4.1", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 1.1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 1.5", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 1.5", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 1.5", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 1.5", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 1.6", "target": "clause:owasp_ai_exchange:modelalignment", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 2.2", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 2.2", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 2.3", "target": "clause:okta_authz:Okta Fine-Grained Authorization \u2014 Knowledge Resource Access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 5.1", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 5.1", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 5.1", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 5.1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 5.1", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) and Internal governance (\u00a75.1)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 5.1", "target": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 5.1", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP 5.1", "target": "clause:owasp_aivss:AIVSS-AARS", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP-1.5", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP-1.5", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP-2.2", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP-2.3", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP-2.3", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP-2.3", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP-2.3", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP-2.3", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP-4.2", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MAP-4.2", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.1", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.1", "target": "clause:openai_model_spec:Stay in bounds; Seek the truth together; Do the best work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.11", "target": "clause:nyc_ll144:\u00a720-871 (Bias audit requirements)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.11", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.11", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.11", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.11", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.11", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.11", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.3", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.4", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.4", "target": "clause:okta_authz:Okta Behavior Detection + System Log \u2014 Sign-In Anomaly Signa", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.4", "target": "clause:okta_authz:Okta for AI Agents \u2014 Scoped Token Authorization", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.4", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Research Categories (Long-Range", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.4", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Sandbagging and Long-range Auto", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.4", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.4", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.9", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.9", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.9", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 2.9", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 3.1", "target": "clause:okta_authz:Okta System Log \u2014 Authorization Policy Adherence Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 3.1", "target": "clause:okta_authz:Okta System Log + Identity Governance Reports \u2014 Authority Li", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 4.1", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE 4.1", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.1", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.10", "target": "clause:owasp_ai_exchange:dataminimize", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.10", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.10", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.11", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.11", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.11", "target": "clause:owasp_aitg:AITG-APP-10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.11", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.11", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.11", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.3", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.3", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.3", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.4", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.4", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.4", "target": "clause:owasp_aisvs:C11.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.4", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.4", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.6", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.6", "target": "clause:owasp_aitg:AITG-INF-04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.6", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.6", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.7", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.7", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.7", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.7", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.7", "target": "clause:owasp_aitg:AITG-APP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.7", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.7", "target": "clause:owasp_aitg:AITG-MOD-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.7", "target": "clause:owasp_aitg:AITG-MOD-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.7", "target": "clause:owasp_ml_top10:ML02:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.7", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_rmf:MEASURE-2.7", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_sp800_34:\u00a72.1", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 leadership risk ownership", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_sp800_34:\u00a72.1", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Safety Advisory Group", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_sp800_34:\u00a73.1", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_sp800_34:\u00a73.1", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Capabilities and Safeguards Repor", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_sp800_34:\u00a73.2", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical capability levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_sp800_34:\u00a73.2", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_sp800_34:\u00a73.4", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard decisions affecting deployed mod", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_sp800_34:\u00a73.5", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven availability changes", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_sp800_34:\u00a73.5", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a75.1 Internal governanc", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:oauth_bcp:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:oauth_bcp:\u00a72.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta \u2014 Concurrent Session Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta Adaptive MFA \u2014 Impossible Travel Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta Authorization Server \u2014 Scope Boundary Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta Cross App Access \u2014 Identity Assertion Authorization Gra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta Cross App Access \u2014 task-scoped resource tokens (RFC 869", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta for AI Agents \u2014 Assurance Levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta for AI Agents \u2014 Capability Manifest", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta for AI Agents \u2014 Minimum Privilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta ISPM \u2014 Credential Exposure Scanning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta OAuth \u2014 DPoP token binding (RFC 9449)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta OIDC \u2014 Dynamic Client Registration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta System Log \u2014 Token Exchange Audit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Anomalous Auth Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Machine Identity Baseline", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:okta_iam:Okta Workflows \u2014 Identity Incident Response", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:openid:RFC 9396", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:openid:RFC 9396 \u00a76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:openid:RFC 9449", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:ping_identity:Ping Identity \u2014 Cross Organization Agent Auth", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core delegation chain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Delegation Depth Limit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:ping_identity:PingFederate \u2014 OIDC Audience Validation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:ping_identity:PingFederate \u2014 Scope Reduction Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a72.1", "target": "clause:ping_identity:PingOne Credentials \u2014 Verifiable Credentials", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a73.3", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 safeguards for High-capability d", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a73.4.1", "target": "clause:okta_iam:Okta \u2014 Multi Region Resilience", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a75.7", "target": "clause:okta_iam:Okta Privileged Access \u2014 Zero Standing Privilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:\u00a75.7", "target": "clause:openid:RFC 9449", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 1", "target": "clause:okta_iam:Okta for AI Agents \u2014 Capability Manifest", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 3", "target": "clause:okta_iam:Okta Cross App Access \u2014 Identity Assertion Authorization Gra", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 3", "target": "clause:okta_iam:Okta Cross App Access \u2014 task-scoped resource tokens (RFC 869", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 3", "target": "clause:okta_iam:Okta OAuth \u2014 DPoP token binding (RFC 9449)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 3", "target": "clause:okta_iam:Okta OIDC \u2014 Dynamic Client Registration", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 3", "target": "clause:openid:RFC 9396", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 3", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 3", "target": "clause:openid:RFC 9396 \u00a76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 3", "target": "clause:openid:RFC 9449", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 3", "target": "clause:ping_identity:PingFederate \u2014 OIDC Audience Validation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 4", "target": "clause:oauth_bcp:\u00a72.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 4", "target": "clause:oauth_bcp:\u00a72.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 4", "target": "clause:okta_iam:Okta for AI Agents \u2014 Assurance Levels", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 4", "target": "clause:okta_iam:Okta for AI Agents \u2014 Minimum Privilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 4", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 4", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core delegation chain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 4", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Delegation Depth Limit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 5", "target": "clause:okta_iam:Okta Adaptive MFA \u2014 Impossible Travel Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 5", "target": "clause:okta_iam:Okta ISPM \u2014 Credential Exposure Scanning", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 5", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Anomalous Auth Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 5", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Machine Identity Baseline", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 6", "target": "clause:okta_iam:Okta \u2014 Concurrent Session Detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 6", "target": "clause:okta_iam:Okta Authorization Server \u2014 Scope Boundary Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 6", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 6", "target": "clause:ping_identity:Ping Identity \u2014 Cross Organization Agent Auth", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 6", "target": "clause:ping_identity:PingFederate \u2014 Scope Reduction Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 6", "target": "clause:ping_identity:PingOne Credentials \u2014 Verifiable Credentials", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 7", "target": "clause:okta_iam:Okta System Log \u2014 Token Exchange Audit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:nist_zt:Tenet 7", "target": "clause:okta_iam:Okta Workflows \u2014 Identity Incident Response", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oauth_bcp:\u00a72.1", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oauth_bcp:\u00a72.1", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core delegation chain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oauth_bcp:\u00a72.1.2", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oauth_bcp:\u00a72.1.2", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core delegation chain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:occ_ai:Model Risk Management booklet (2021)", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:occ_ai:Model Risk Management booklet (2021)", "target": "clause:sr26_2:\u00a7VI (Model Inventory)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.1", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.1", "target": "clause:un_ethics_ai:\u00b635\u2013\u00b636 (Human oversight and determination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.2", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.2", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.3", "target": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.3", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.3", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.3", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.3", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.3", "target": "clause:un_ethics_ai:\u00b637 (Transparency)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.3", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.4", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.5", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.5", "target": "clause:openai_model_spec:Stay in bounds; Seek the truth together; Do the best work", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.5", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principle 1.5", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_ai_principles:Principles 1.3, 1.4", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "target": "clause:okta_authz:Okta Identity Tokens \u2014 Principal Identity Binding for AI Age", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Disclosure and G", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Reporting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "target": "clause:soc2:CC2.3 \u2014 Communicates with external parties", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "target": "clause:soc2:CC2.3 / CC7.4 \u2014 External communication and incident response", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oidc_federation:\u00a79", "target": "clause:okta_iam:Okta Universal Directory \u2014 Federation Trust Config", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:oidc_federation:\u00a79", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Trust Framework", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_authz:Okta Authorization Server \u2014 Signed Token Claims as Authoriza", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 System Cards and Safeguards Repo", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_authz:Okta Authorization Server \u2014 Signed Token Claims as Authoriza", "target": "clause:soc2:CC3.1 \u2014 COSO Principle 6 \u2014 Specifies suitable objectives", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_authz:Okta for AI Agents \u2014 Scoped Token Authorization", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Research Categories (Long-Range", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_authz:Okta System Log \u2014 Identity-Mediated Procurement Authorizatio", "target": "clause:soc2:CC7.2 \u2014 Detection and Monitoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Authorization Decision Reco", "target": "clause:soc2:CC7.2 \u2014 The entity monitors system components for anomalies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Contract Authorization Evid", "target": "clause:soc2:CC7.2 \u2014 Monitoring of system components", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_authz:Okta System Log Compliance Reports \u2014 Authorization Audit Evi", "target": "clause:soc2:CC4.1 \u2014 COSO Principle 16 \u2014 ongoing and/or separate evaluati", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta access management", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta access management", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta Adaptive MFA", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta Adaptive MFA", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta Adaptive MFA", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta Adaptive MFA", "target": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta Privileged Access", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta Privileged Access", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta Privileged Access", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta Privileged Access", "target": "clause:sr26_2:\u00a7V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:omb_a_123:Section III.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:omb_a_123:Section IV.A", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:pcaob_as_2201:\u00b6.14-.18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:pcaob_as_2201:\u00b6.39-.42", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:pcaob_as_2201:\u00b6.68-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:pcaob_as_2201:\u00b6.72-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:soc2:CC2.2 & CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:soc2:CC6.6, CC6.7, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:soc2:CC7.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_financial:Okta System Log", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Access certification", "target": "clause:openai_policies:Data residency commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Access certification", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Access certification", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Access certification", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Access certification", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Access Certifications", "target": "clause:openai_policies:Usage Policies", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Access Certifications", "target": "clause:soc2:CC3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Access Requests", "target": "clause:soc2:CC2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Audit reporting", "target": "clause:openai_policies:Data residency commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Audit reporting", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Audit reporting", "target": "clause:openai_policies:Trust Portal", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Audit reporting", "target": "clause:soc2:A1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Audit reporting", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Audit reporting", "target": "clause:soc2:CC1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Audit reporting", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Audit reporting", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Audit reporting", "target": "clause:soc2:CC4.1 and CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Audit reporting", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Audit reporting", "target": "clause:soc2:CC6.1, CC7.1, CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Audit reporting", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Entitlement Management", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Entitlement Management", "target": "clause:soc2:CC1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Entitlement Management", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Workflows", "target": "clause:openai_policies:Enterprise DPA", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_governance:Workflows", "target": "clause:soc2:CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta + DataGrail integration \u2014 automated DSR intake", "target": "clause:openai_privacy:OpenAI privacy request channels (privacy.openai.com / dsar@o", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Access Certifications \u2014 Service Account Reviews", "target": "clause:scim:RFC 7644 \u00a73.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta API Access Management \u2014 OAuth scopes and consent", "target": "clause:openai_privacy:OpenAI Enterprise Privacy \u2014 customer responsibility for lawf", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta API Access Management \u2014 OAuth scopes and consent", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Authorization Server \u2014 Scope Boundary Enforcement", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Authorization Server \u2014 Scope Boundary Enforcement", "target": "clause:ping_identity:PingFederate \u2014 Scope Reduction Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Cross App Access \u2014 Identity Assertion Authorization Gra", "target": "clause:openid:RFC 9396 \u00a76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Cross App Access \u2014 task-scoped resource tokens (RFC 869", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta for AI Agents \u2014 Agent Registry", "target": "clause:owasp_nhi10:NHI1:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta for AI Agents \u2014 Agent Registry", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta for AI Agents \u2014 Agent Registry", "target": "clause:scim:RFC 7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta for AI Agents \u2014 Minimum Privilege", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta for AI Agents \u2014 Owner Binding", "target": "clause:scim:RFC 7643 \u00a74.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Identity Governance \u2014 Attestation Evidence", "target": "clause:openai_sf:OpenAI Enterprise Compliance API \u2014 audit and auth log export", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Identity Governance \u2014 Attestation Evidence", "target": "clause:openid:RFC 9396", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Identity Governance \u2014 Attestation Evidence", "target": "clause:w3c_did:\u00a75.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Identity Governance \u2014 Governance Structure", "target": "clause:ping_identity:Ping Identity for AI \u2014 Governance Capabilities", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta ISPM \u2014 Unmanaged Agent Discovery", "target": "clause:scim:RFC 7644 \u00a73.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Lifecycle Management \u2014 account deactivation and deletio", "target": "clause:openai_privacy:OpenAI data deletion controls", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Lifecycle Management \u2014 account suspension states", "target": "clause:openai_privacy:OpenAI enterprise data controls \u2014 business data not used for", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Lifecycle Management \u2014 account suspension states", "target": "clause:uk_duaa:automated decision rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Lifecycle Management \u2014 automated deprovisioning workflo", "target": "clause:openai_privacy:OpenAI privacy request processing \u2014 data deletion", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Lifecycle Management \u2014 automated deprovisioning workflo", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Lifecycle Management \u2014 Deprovisioning", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent Gateway revocation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Lifecycle Management \u2014 Deprovisioning", "target": "clause:scim:RFC7644 \u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Lifecycle Management \u2014 Provisioning Gate", "target": "clause:owasp_nhi10:NHI2:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Lifecycle Management \u2014 Provisioning Gate", "target": "clause:owasp_nhi10:NHI5:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Lifecycle Management \u2014 Provisioning Gate", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core provisioning gate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Lifecycle Management \u2014 Provisioning Gate", "target": "clause:scim:RFC7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Lifecycle Management \u2014 Provisioning Gate", "target": "clause:spiffe_spire:SVID \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta OAuth \u2014 DPoP token binding (RFC 9449)", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta OAuth \u2014 DPoP token binding (RFC 9449)", "target": "clause:openid:RFC 9449", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta OAuth \u2014 Token Revocation Propagation", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta OAuth \u2014 Token Revocation Propagation", "target": "clause:scim:RFC7644 \u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta OAuth \u2014 User Consent Framework", "target": "clause:openid:RFC 9396 \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta OIDC \u2014 Dynamic Client Registration", "target": "clause:openid:RFC 9396", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta OIDC \u2014 Dynamic Client Registration", "target": "clause:ping_identity:PingFederate \u2014 OIDC Audience Validation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Privileged Access \u2014 Zero Standing Privilege", "target": "clause:openid:RFC 9449", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta real-time directory synchronization \u2014 consent state pro", "target": "clause:openai_privacy:OpenAI API usage monitoring \u2014 data control configuration aud", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta real-time directory synchronization \u2014 consent state pro", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta scoped administrator roles \u2014 least-privilege data expor", "target": "clause:openai_privacy:OpenAI privacy request fulfillment \u2014 personal data access", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta scoped administrator roles \u2014 least-privilege data expor", "target": "clause:uk_duaa:access rights provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta System Log \u2014 real-time audit events", "target": "clause:openai_privacy:OpenAI privacy request records", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta trust page (trust.okta.com) \u2014 third-party audit certifi", "target": "clause:openid:OpenID Connect Core 1.0 \u00a73.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta trust page (trust.okta.com) \u2014 third-party audit certifi", "target": "clause:ping_identity:Ping Identity compliance certifications (SOC 2 Type II, ISO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Universal Directory \u2014 custom profile attributes for con", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 customer content and train", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Universal Directory \u2014 custom profile attributes for con", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Universal Directory \u2014 Federation Trust Config", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Trust Framework", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Universal Directory \u2014 profile export APIs", "target": "clause:openai_privacy:OpenAI API \u2014 customer data export", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:okta_iam:Okta Workflows \u2014 event-driven lifecycle automation", "target": "clause:openai_privacy:OpenAI API data controls \u2014 retention and training configurat", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section II.A", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section II.A", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section II.A", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section II.A", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section II.B", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section II.B", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section II.B", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section III.A", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section III.A", "target": "clause:pcaob_as_2201:\u00b6.14-.18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section III.A", "target": "clause:sox:\u00a7301", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section III.A", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section III.A", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section III.A", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section IV.A", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section IV.A", "target": "clause:pcaob_as_2201:\u00b6.72-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section IV.A", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section IV.A", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section IV.A", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section IV.A", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section VI", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section VI", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section VI.A", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:omb_a_123:Section VI.A", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:API model versioning & deprecation policy", "target": "clause:pcaob_as_2201:\u00b6.39-.40", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:API model versioning & deprecation policy", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:API model versioning & deprecation policy", "target": "clause:soc2:CC6.1, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:API model versioning & deprecation policy", "target": "clause:sox:\u00a7404(a)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:API model versioning & deprecation policy", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:API model versioning & deprecation policy", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:API model versioning & deprecation policy", "target": "clause:sr26_2:\u00a7V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:API model versioning & deprecation policy", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Data Processing Addendum", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Data Processing Addendum", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Data Processing Addendum", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Data Processing Addendum", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Data Processing Addendum", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Data Processing Addendum", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Data Processing Addendum", "target": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:pcaob_as_2201:\u00b6.14-.18", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:pcaob_as_2201:\u00b6.39-.42", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:pcaob_as_2201:\u00b6.68-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:pcaob_as_2201:\u00b6.72-.76", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:soc2:CC2.2 & CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:soc2:CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:soc2:CC7.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:soc2:CC7.4, CC7.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sox:\u00a7302(a)(5)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sox:Section 302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sr26_2:\u00a7V (Outcomes Analysis)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "target": "clause:pcaob_as_2201:\u00b6.62-.70", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "target": "clause:sr26_2:\u00a7V + \u00a7VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "target": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Zero data retention (API)", "target": "clause:soc2:CC6.6, CC6.7, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Zero data retention (API)", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Zero data retention (API)", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_enterprise:Zero data retention (API)", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_model_spec:Overview (published model behavior specification)", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "target": "clause:owasp_ai_exchange:aitransparency", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "target": "clause:un_ethics_ai:\u00b637 (Transparency)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "target": "clause:un_ethics_ai:\u00b635\u2013\u00b636 (Human oversight and determination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_model_spec:The chain of command", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Data residency commitments", "target": "clause:soc2:CC4.1 and CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Enterprise DPA", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Enterprise DPA", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Enterprise DPA", "target": "clause:soc2:CC1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Enterprise DPA", "target": "clause:soc2:CC2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Enterprise DPA", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Enterprise DPA", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Enterprise DPA", "target": "clause:soc2:CC5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Enterprise DPA", "target": "clause:soc2:CC6.1, CC7.1, CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Enterprise DPA", "target": "clause:soc2:CC9.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Trust Portal", "target": "clause:soc2:CC1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Trust Portal", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Usage Policies", "target": "clause:soc2:CC1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_policies:Usage Policies", "target": "clause:soc2:CC3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Disclosure and G", "target": "clause:soc2:CC2.3 / CC7.4 \u2014 External communication and incident response", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Reporting", "target": "clause:soc2:CC2.3 \u2014 Communicates with external parties", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Preparedness Framework v2 \u2014 System Cards and Safeguards Repo", "target": "clause:soc2:CC3.1 \u2014 COSO Principle 6 \u2014 Specifies suitable objectives", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "target": "clause:owasp_ai_exchange:limitresources", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "target": "clause:owasp_ai_exchange:ratelimit", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "target": "clause:owasp_ai_exchange:monitoruse", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "target": "clause:salesforce_trust:Toxicity detection \u2014 output scoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy and Autonom", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy and Autonom", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Sandbagging and Long-range Auto", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "target": "clause:owasp_ai_exchange:oversight", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "target": "clause:salesforce_trust:Data masking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "target": "clause:owasp_aivss:AIVSS-AARS", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI API data retention policy \u2014 30-day default", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI API log retention \u2014 30-day abuse monitoring window", "target": "clause:owasp_ai_exchange:shortretain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI API usage monitoring \u2014 data control configuration aud", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 customer content and train", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI data residency \u2014 regional offerings", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI data residency \u2014 regional offerings", "target": "clause:uk_duaa:Data protection complaints procedure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI data residency \u2014 regional storage options", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI data residency \u2014 regional storage options", "target": "clause:uk_duaa:international transfer provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI DPA and security documentation \u2014 customer transfer as", "target": "clause:uk_duaa:TIA equivalent", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI enterprise data controls \u2014 business data not used for", "target": "clause:uk_duaa:automated decision rights", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI Enterprise Privacy \u2014 customer responsibility for lawf", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI privacy request fulfillment \u2014 personal data access", "target": "clause:uk_duaa:access rights provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI privacy request processing \u2014 data deletion", "target": "clause:owasp_ai_exchange:alloweddata", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI system cards \u2014 model behavior transparency", "target": "clause:owasp_ai_exchange:explainability", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI trust and compliance documentation", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_privacy:OpenAI usage policies \u2014 restricted inference uses", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_sf:OpenAI Enterprise Compliance API \u2014 audit and auth log export", "target": "clause:openid:RFC 9396", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openai_sf:OpenAI Enterprise Compliance API \u2014 audit and auth log export", "target": "clause:w3c_did:\u00a75.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openid:OpenID Connect Core 1.0 \u00a73.1", "target": "clause:ping_identity:Ping Identity compliance certifications (SOC 2 Type II, ISO", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openid:RFC 9396", "target": "clause:ping_identity:PingFederate \u2014 OIDC Audience Validation", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openid:RFC 9396", "target": "clause:w3c_did:\u00a75.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openid:RFC 9396 \u00a72", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core delegation chain", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openid:RFC 9396 \u00a72", "target": "clause:ping_identity:PingFederate \u2014 Scope Reduction Enforcement", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openid:RFC 9396 \u00a72", "target": "clause:scim:RFC7644 \u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:openlineage:RunEvent object (OpenLineage.json JSON Schema)", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:aiprogram", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:aitransparency", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:aitransparency", "target": "clause:owasp_aisvs:C7.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:aitransparency", "target": "clause:owasp_aisvs:C7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:aitransparency", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:aitransparency", "target": "clause:owasp_aitg:AITG-APP-14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:aitransparency", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:aitransparency", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:aitransparency", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:aitransparency", "target": "clause:un_ethics_ai:\u00b637 (Transparency)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:alloweddata", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:alloweddata", "target": "clause:pipl:55", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:alloweddata", "target": "clause:quebec_law25:3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:alloweddata", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:alloweddata", "target": "clause:uk_duaa:children provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:alloweddata", "target": "clause:uk_duaa:international transfer provisions", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:anomalousinputhandling", "target": "clause:owasp_aisvs:C2.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:anomalousinputhandling", "target": "clause:owasp_aisvs:C2.1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:anomalousinputhandling", "target": "clause:owasp_aisvs:C2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:anomalousinputhandling", "target": "clause:owasp_aisvs:C2.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:anomalousinputhandling", "target": "clause:owasp_aisvs:C2.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:anomalousinputhandling", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:anomalousinputhandling", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:augdataintegrity", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:augdataintegrity", "target": "clause:owasp_aisvs:C8.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:augdataintegrity", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:augdataintegrity", "target": "clause:owasp_aisvs:C8.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:augdataintegrity", "target": "clause:owasp_aisvs:C8.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:augdataintegrity", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:augdataintegrity", "target": "clause:owasp_aisvs:C9.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:augdataintegrity", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:augdataintegrity", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:checkcompliance", "target": "clause:owasp_aisvs:C1.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:checkcompliance", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:checkcompliance", "target": "clause:uk_duaa:Data protection complaints procedure", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:confcompute", "target": "clause:owasp_aisvs:C4.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:confcompute", "target": "clause:owasp_aisvs:C4.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:confcompute", "target": "clause:owasp_aisvs:C4.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:confcompute", "target": "clause:owasp_aisvs:C4.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:confcompute", "target": "clause:owasp_aisvs:C4.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:confcompute", "target": "clause:owasp_aisvs:C4.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:continuousvalidation", "target": "clause:owasp_aisvs:C11.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:continuousvalidation", "target": "clause:owasp_aisvs:C11.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:continuousvalidation", "target": "clause:owasp_aisvs:C11.1.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:continuousvalidation", "target": "clause:owasp_aisvs:C3.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:continuousvalidation", "target": "clause:owasp_aitg:AITG-APP-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:continuousvalidation", "target": "clause:owasp_aitg:AITG-MOD-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:continuousvalidation", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:continuousvalidation", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:continuousvalidation", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:dataminimize", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:dataminimize", "target": "clause:owasp_aisvs:C8.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:dataminimize", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:dataminimize", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:dataminimize", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:dataqualitycontrol", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:dataqualitycontrol", "target": "clause:owasp_aitg:AITG-MOD-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:dataqualitycontrol", "target": "clause:owasp_ml_top10:ML02:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:dataqualitycontrol", "target": "clause:snowflake_horizon:Data Quality Monitoring (data metric functions)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:dataqualitycontrol", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:encodemodeloutput", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:encodemodeloutput", "target": "clause:owasp_aisvs:C7.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:encodemodeloutput", "target": "clause:owasp_aisvs:C7.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:encodemodeloutput", "target": "clause:owasp_aisvs:C7.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:encodemodeloutput", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:encodemodeloutput", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:encodemodeloutput", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:encodemodeloutput", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:encodemodeloutput", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:encodemodeloutput", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:encodemodeloutput", "target": "clause:salesforce_trust:Data masking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:evasioninputhandling", "target": "clause:owasp_aisvs:C2.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:evasioninputhandling", "target": "clause:owasp_aisvs:C2.1.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:evasioninputhandling", "target": "clause:owasp_aisvs:C2.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:evasioninputhandling", "target": "clause:owasp_aisvs:C2.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:evasioninputhandling", "target": "clause:owasp_aisvs:C2.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:explainability", "target": "clause:owasp_aitg:AITG-APP-14", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:explainability", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_aisvs:C10.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_aisvs:C10.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_aisvs:C2.1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_aisvs:C5.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_aisvs:C8.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_aisvs:C9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_aisvs:C9.3.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:inputsegregation", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C5.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C9.3.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_aitg:AITG-APP-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:leastmodelprivilege", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:limitresources", "target": "clause:owasp_aisvs:C12.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:limitresources", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:limitresources", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:limitresources", "target": "clause:owasp_aisvs:C9.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:limitresources", "target": "clause:owasp_aisvs:C9.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:limitresources", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:limitresources", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:limitresources", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:limitresources", "target": "clause:owasp_llm10:LLM10:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_aisvs:C12.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_aisvs:C5.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_aisvs:C5.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_aisvs:C9.2.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_aisvs:C9.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_aisvs:C9.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_aisvs:C9.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_aisvs:C9.5.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_aisvs:C9.5.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelaccesscontrol", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelobfuscation", "target": "clause:owasp_aisvs:C11.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:modelobfuscation", "target": "clause:owasp_ml_top10:ML03:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aisvs:C11.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aisvs:C12.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aisvs:C12.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aisvs:C12.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aisvs:C12.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aisvs:C12.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aisvs:C12.5.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aisvs:C9.3.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:salesforce_trust:Toxicity detection \u2014 output scoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:monitoruse", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:obfuscatetrainingdata", "target": "clause:owasp_aisvs:C11.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:obfuscatetrainingdata", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:obfuscatetrainingdata", "target": "clause:owasp_ml_top10:ML03:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_aisvs:C7.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_aisvs:C7.4.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_aisvs:C9.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_aisvs:C9.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_aisvs:C9.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_aisvs:C9.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_aisvs:C9.2.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_aisvs:C9.5.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_aisvs:C9.6.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_aitg:AITG-APP-13", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:oversight", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:poisonrobustmodel", "target": "clause:owasp_aitg:AITG-INF-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:poisonrobustmodel", "target": "clause:owasp_aitg:AITG-MOD-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:poisonrobustmodel", "target": "clause:owasp_ml_top10:ML02:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:poisonrobustmodel", "target": "clause:owasp_ml_top10:ML10:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:poisonrobustmodel", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_aisvs:C10.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_aisvs:C10.4.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_aisvs:C12.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_aisvs:C2.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_aisvs:C2.1.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_aisvs:C9.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_aisvs:C9.5.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_aitg:AITG-APP-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:promptinjectioniohandling", "target": "clause:salesforce_trust:Secure data retrieval, dynamic grounding, and toxicity detec", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:ratelimit", "target": "clause:owasp_aisvs:C11.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:ratelimit", "target": "clause:owasp_aisvs:C9.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:ratelimit", "target": "clause:owasp_aisvs:C9.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:ratelimit", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:runtimemodelintegrity", "target": "clause:owasp_aisvs:C3.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:runtimemodelintegrity", "target": "clause:owasp_aisvs:C4.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:runtimemodelintegrity", "target": "clause:owasp_aisvs:C4.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:runtimemodelintegrity", "target": "clause:owasp_aisvs:C4.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:runtimemodelintegrity", "target": "clause:owasp_aisvs:C4.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:runtimemodelintegrity", "target": "clause:owasp_aisvs:C4.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:runtimemodelintegrity", "target": "clause:owasp_aisvs:C4.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:runtimemodelintegrity", "target": "clause:owasp_aisvs:C6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:runtimemodelintegrity", "target": "clause:owasp_aisvs:C6.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:runtimemodelintegrity", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:runtimemodelintegrity", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:runtimemodelintegrity", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:secdevprogram", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:secdevprogram", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:secdevprogram", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:seceducate", "target": "clause:owasp_aisvs:C7.4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:seceducate", "target": "clause:owasp_aisvs:C9.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:seceducate", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:seceducate", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:secprogram", "target": "clause:owasp_aisvs:C12.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:secprogram", "target": "clause:owasp_aisvs:C3.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:secprogram", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:secprogram", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:sensitiveoutputhandling", "target": "clause:owasp_aisvs:C12.2.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:sensitiveoutputhandling", "target": "clause:owasp_aisvs:C5.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:sensitiveoutputhandling", "target": "clause:owasp_aisvs:C7.3.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:sensitiveoutputhandling", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:sensitiveoutputhandling", "target": "clause:salesforce_trust:Data masking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:shortretain", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C10.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C10.1.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C10.2.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C10.2.5", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C10.3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C10.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C10.4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C10.4.8", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C3.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C6.1.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C6.1.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C6.1.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C6.2.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C6.2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C6.2.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C9.3.4", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aisvs:C9.3.7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_aitg:AITG-INF-01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_ml_top10:ML06:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:supplychainmanage", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:unwantedbiastesting", "target": "clause:owasp_aitg:AITG-APP-10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:unwantedbiastesting", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:unwantedbiastesting", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ai_exchange:unwantedbiastesting", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.1.1", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.1.1", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.1.1", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.1.2", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.1.3", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.1.3", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.1.3", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.2.4", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.2.5", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.3.3", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.3.4", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.4.1", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.4.1", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.4.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.4.2", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.4.2", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.4.2", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.4.3", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.4.3", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.4.8", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.4.8", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C10.4.8", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C11.1.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C11.1.3", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C11.2.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C11.2.3", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C11.2.3", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C11.2.5", "target": "clause:owasp_ml_top10:ML03:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C12.1.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C12.2.1", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C12.2.1", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C12.2.2", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C12.2.3", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C12.2.3", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C12.2.5", "target": "clause:owasp_llm10:LLM10:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C12.2.6", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C12.2.6", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C12.2.6", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C12.4.1", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C12.4.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C12.5.3", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C2.1.3", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C2.1.3", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C2.1.6", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C2.1.6", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C3.1.1", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C3.1.3", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C3.1.3", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C3.1.3", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C3.3.1", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C3.3.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C4.1.1", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C4.2.2", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C5.1.2", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C5.1.2", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C5.1.2", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C5.2.1", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C5.2.1", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C5.2.2", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C5.2.2", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C5.2.4", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C5.2.5", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C6.1.1", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C6.1.3", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C6.1.3", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C6.1.3", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C6.1.4", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C6.1.4", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C6.2.1", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C6.2.1", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C6.2.1", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C6.2.2", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C6.2.2", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C6.2.2", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C6.2.3", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.1.1", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.1.1", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.3.2", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.3.2", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.3.3", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.3.3", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.3.3", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.3.3", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.3.4", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.3.4", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.4.1", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.4.1", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.4.2", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C7.4.4", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C8.2.1", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C8.2.3", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C8.2.4", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C8.2.4", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C8.3.1", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C8.3.2", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.1.1", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.1.1", "target": "clause:owasp_llm10:LLM10:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.1.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.1.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.1.2", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.1.2", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.1.2", "target": "clause:owasp_llm10:LLM10:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.1.3", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.1.3", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.1.3", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.1", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.1", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.1", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.1", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.10", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.2", "target": "clause:owasp_asi:ASI09", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.2", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.3", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.3", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.3", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.3", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.4", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.4", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.4", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.4", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.5", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.5", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.5", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.5", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.5", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.5", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.6", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.7", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.8", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.2.8", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.1", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.1", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.2", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.2", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.4", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.4", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.5", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.5", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.7", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.7", "target": "clause:owasp_asi:ASI04", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.7", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.7", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.7", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.3.8", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.4.1", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.4.1", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.4.1", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.4.2", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.4.3", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.4.3", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.4.4", "target": "clause:owasp_asi:ASI06", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.1", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.1", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.1", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.1", "target": "clause:owasp_asi:ASI05", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.2", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.2", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.3", "target": "clause:owasp_asi:ASI01", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.3", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.3", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.4", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.4", "target": "clause:owasp_llm10:LLM07:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.4", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.5", "target": "clause:owasp_asi:ASI07", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.5", "target": "clause:owasp_asi:ASI08", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.5.6", "target": "clause:owasp_asi:ASI03", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.6.1", "target": "clause:owasp_asi:ASI02", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aisvs:C9.6.1", "target": "clause:owasp_asi:ASI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aitg:AITG-APP-05", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aitg:AITG-APP-10", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aitg:AITG-APP-13", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aitg:AITG-DAT-03", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aitg:AITG-DAT-05", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aitg:AITG-INF-01", "target": "clause:owasp_ml_top10:ML06:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aitg:AITG-INF-01", "target": "clause:sr262:Sec. VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aitg:AITG-INF-01", "target": "clause:sr262:Sec. VII", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aitg:AITG-MOD-01", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aitg:AITG-MOD-03", "target": "clause:owasp_ml_top10:ML02:2023", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aitg:AITG-MOD-03", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_aitg:AITG-MOD-06", "target": "clause:sr262:Sec. V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_asi:ASI01", "target": "clause:owasp_llm10:LLM01:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_asi:ASI01", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_asi:ASI03", "target": "clause:owasp_llm10:LLM02:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_asi:ASI03", "target": "clause:owasp_nhi:NHI10", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_asi:ASI03", "target": "clause:owasp_nhi:NHI7", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_asi:ASI04", "target": "clause:owasp_llm10:LLM03:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_asi:ASI04", "target": "clause:owasp_llm10:LLM04:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_asi:ASI04", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_asi:ASI06", "target": "clause:owasp_llm10:LLM08:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_asi:ASI08", "target": "clause:owasp_llm10:LLM05:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_asi:ASI09", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_asi:ASI10", "target": "clause:owasp_llm10:LLM06:2025", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_llm10:LLM01:2025", "target": "clause:salesforce_trust:Prompt defense", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_llm10:LLM02:2025", "target": "clause:salesforce_trust:Data masking", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_llm10:LLM03:2025", "target": "clause:owasp_nhi:NHI3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_llm10:LLM05:2025", "target": "clause:salesforce_trust:Secure data retrieval, dynamic grounding, and toxicity detec", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_llm10:LLM06:2025", "target": "clause:salesforce_trust:Audit trail", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_llm10:LLM06:2025", "target": "clause:salesforce_trust:Toxicity detection \u2014 output scoring", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_ml_top10:ML02:2023", "target": "clause:sr262:Sec. IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_nhi10:NHI1:2025", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_nhi10:NHI1:2025", "target": "clause:scim:RFC 7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_nhi10:NHI2:2025", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core provisioning gate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_nhi10:NHI2:2025", "target": "clause:scim:RFC7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_nhi10:NHI2:2025", "target": "clause:spiffe_spire:SVID \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_nhi10:NHI5:2025", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core provisioning gate", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_nhi10:NHI5:2025", "target": "clause:scim:RFC7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:owasp_nhi10:NHI5:2025", "target": "clause:spiffe_spire:SVID \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.14-.18", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.14-.18", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.20", "target": "clause:sec_ai:Proposed rule, Release 34-97990 (withdrawn 2025-06-12)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.20", "target": "clause:sox:\u00a7302(a)(4)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.24-.28", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.24-.28", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.24-.28", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.24-.28", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.24-.28", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.39", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.39-.40", "target": "clause:soc2:CC6.1, CC7.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.39-.40", "target": "clause:sox:\u00a7404(a)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.39-.42", "target": "clause:soc2:CC2.2 & CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.39-.42", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.39-.42", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.46", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.46", "target": "clause:soc2:CC4.1", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.46", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.46", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.46", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.46", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.62-.70", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.62-.70", "target": "clause:sr26_2:\u00a7V + \u00a7VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.68-.76", "target": "clause:soc2:CC2.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.68-.76", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.68-.76", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.72-.76", "target": "clause:soc2:CC4.1, CC4.2", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pcaob_as_2201:\u00b6.72-.76", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ping_identity:Ping Identity for AI \u2014 Agent Gateway revocation", "target": "clause:scim:RFC7644 \u00a73.6", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core", "target": "clause:scim:RFC 7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core provisioning gate", "target": "clause:scim:RFC7644 \u00a73.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core provisioning gate", "target": "clause:spiffe_spire:SVID \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ping_identity:PingOne Credentials \u2014 eIDAS 2.0-aligned verifiable credentia", "target": "clause:w3c_did:\u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ping_identity:PingOne Credentials \u2014 eIDAS 2.0-aligned verifiable credentia", "target": "clause:w3c_did:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ping_identity:PingOne Credentials \u2014 W3C Verifiable Credentials / DID", "target": "clause:w3c_did:\u00a74", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:ping_identity:PingOne Credentials \u2014 W3C Verifiable Credentials / DID", "target": "clause:w3c_did:\u00a75", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:pipl:55", "target": "clause:quebec_law25:3.3", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:scim:RFC7644 \u00a73.3", "target": "clause:spiffe_spire:SVID \u00a72", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sec_ai:Proposed rule, Release 34-97990 (withdrawn 2025-06-12)", "target": "clause:sox:\u00a7302(a)(4)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC2.2", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC2.2", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC2.2 & CC4.1", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC2.2 & CC4.1", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC2.3", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC4.1", "target": "clause:sox:\u00a7404(b)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC4.1", "target": "clause:sox:Section 302 & 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC4.1", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC4.1", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC4.1, CC4.2", "target": "clause:sox:\u00a7302, \u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC6.1, CC7.2", "target": "clause:sox:\u00a7404(a)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC6.6, CC6.7, CC7.2", "target": "clause:sox:\u00a7404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC6.6, CC6.7, CC7.2", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC7.2", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC7.2", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC7.2", "target": "clause:sr26_2:\u00a7V (Outcomes Analysis)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC7.3", "target": "clause:sox:\u00a7302", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC7.4, CC7.5", "target": "clause:sox:\u00a7302(a)(5)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC7.4, CC7.5", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC9.2", "target": "clause:sox:Section 404", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:CC9.2", "target": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:soc2:PI1.1", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7301", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7302", "target": "clause:sr26_2:\u00a7V (Outcomes Analysis)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7302", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7302", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7302 & \u00a7404", "target": "clause:sr26_2:\u00a7V + \u00a7VI", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7302 & \u00a7404", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7302, \u00a7404", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7302(a)(5)", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7404", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7404", "target": "clause:sr26_2:\u00a7IV", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7404", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7404", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7404", "target": "clause:sr26_2:\u00a7VI (Model Inventory)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7404", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7404(b)", "target": "clause:sr26_2:\u00a7V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:\u00a7404(b)", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:Section 302", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:Section 302", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:Section 302", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:Section 302 & 404", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:Section 302 & 404", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:Section 404", "target": "clause:sr26_2:\u00a7V", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:Section 404", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:Section 404", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "clause:sox:Section 404", "target": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "crosswalks_to", "provenance": { "source": "corpus", "via": "co-cited-on-control" }, "confidence": null }, { "source": "source:acm_ethics", "target": "clause:acm_ethics:\u00a71.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:acm_ethics", "target": "clause:acm_ethics:\u00a71.1\u20131.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:acm_ethics", "target": "clause:acm_ethics:\u00a71.1, \u00a71.2, \u00a72.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:acm_ethics", "target": "clause:acm_ethics:\u00a71.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:acm_ethics", "target": "clause:acm_ethics:\u00a71.2, \u00a72.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:acm_ethics", "target": "clause:acm_ethics:\u00a71.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:acm_ethics", "target": "clause:acm_ethics:\u00a72.3, \u00a73.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:acm_ethics", "target": "clause:acm_ethics:\u00a72.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:acm_ethics", "target": "clause:acm_ethics:\u00a73.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic API data controls \u2014 configuration verification", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic API data retention controls", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic API data retention defaults", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic API log retention controls", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic compliance artifacts \u2014 SOC 2 Type II, GDPR DPA, HI", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 processing on documente", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 security incident notif", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 Standard Contractual Cl", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 training data commitmen", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum (DPA)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum and compliance documentat", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic Privacy Policy and Consumer Terms \u2014 training data", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic privacy support channels", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment capabi", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment risk a", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic SOC 2 Type II and GDPR DPA \u2014 vendor assurance arti", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic Zero Data Retention (ZDR) Addendum", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic zero data retention option", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Anthropic zero data retention option \u2014 non-retention by arch", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Privacy Policy", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_privacy", "target": "clause:anthropic_privacy:Usage Policy", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL Deployment and Security Standards", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL-3 Security Standard", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 Risk Reports", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Anthropic Transparency Hub \u2014 Model Reports", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Human Overs", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Operator Sc", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 deployment restrictions and de-d", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse detection and rapid respo", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 provider-initiated de-deployment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 rapid response to misuse", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:ASL-3 Security Standard", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability assessment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability assessment methodology", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability assessments", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability Report", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability Thresholds", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability thresholds \u2014 ASL-3 standards at defined capabilit", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability Thresholds \u2014 capability and behavior assessment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability Thresholds \u2014 threshold-triggered safeguard requir", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability Thresholds (threshold-triggered evaluation and re", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards \u2014 pre-deployme", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Claude's Constitution \u2014 operator and user permission hierarc", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Claude's Constitution + Anthropic Usage Policy \u2014 Acting With", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer accountability", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer and internal accoun", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Governance (\u00a74)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Governance (\u00a74) \u2014 policy maintenance and updates", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Governance and Transparency \u2014 public safety framework disclo", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer an", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Required Safeguards", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Responsible Scaling Officer", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Risk Reports (\u00a73.1 Scope and Timing) \u2014 recurring evidence ca", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Risk Reports (\u00a73)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Risk Reports (\u00a73) \u2014 documented capability and safeguard evid", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Risk Reports (evaluation-gated deployment)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Risk Reports and capability determinations \u2014 documented safe", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Risk Reports and ongoing capability reassessment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 ASL-3 Deployment Standard (Misuse Safeguards and", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Assessment (Periodic Re-Evaluation)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Thresholds and Required Safeguards", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Documented Capability and Safeguards Assessments", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance (Responsible Scaling Officer and Board", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance and Transparency (Public Disclosures)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Re-Assessment Triggers on Material Change", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Required Safeguards as Blocking Conditions", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report Sign-Off", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_rsp", "target": "clause:anthropic_rsp:Usage Policy (separate document) \u2014 restricted high-risk uses", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_transparency", "target": "clause:anthropic_transparency:Model card \u2014 factual-accuracy evaluations and limitations", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_transparency", "target": "clause:anthropic_transparency:Model card \u2014 hallucination and factuality evaluations", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_transparency", "target": "clause:anthropic_transparency:Model card \u2014 knowledge cutoff disclosure", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_transparency", "target": "clause:anthropic_transparency:Model card \u2014 known limitations and citation-accuracy risks", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_transparency", "target": "clause:anthropic_transparency:Model card \u2014 known limitations disclosure", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_transparency", "target": "clause:anthropic_transparency:Model Card \u2014 Training Data Cutoff", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_transparency", "target": "clause:anthropic_transparency:Model card \u2014 training data description", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part I \u2014 Regulated industries and compliance requirements; P", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part II \u2014 Identity and privilege abuse (agents operate with", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part II \u2014 Memory-based privilege retention (escalating privi", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks (loop amplification)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning; Part III \u2014 Input sanitization (tre", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance (manager to worker", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Log all tool invocations)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Advanced: hard", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (certificate li", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Enterprise: mu", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Foundation/Ent", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Unique cryptog", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification (persistent agent IDs", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (approval processes for ne", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Documented acceptable use", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (incident response procedu", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Update policies based on", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (alert when thresholds exceeded", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (API call rates, data access vo", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part IV Phase 6 \u2014 Attribute-ba", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Automated response (session termination, credenti", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Automated response; Part V \u2014 Establish emergency", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Dynamic privilege adjustment b", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (JIT/JEA, dynamic elevation); P", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Review and certify permissions", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Recovery capabilities", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (identity-based isolation: ev", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (OAuth 2.0); Part IV Phase", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens, OAuth", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens); Part", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (token-based authenticatio", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Service authentication; Part III \u2014 Access control", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Distributed tracing across multi-ag", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part IV Phase 5 \u2014 Sand", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part II \u2014 Unscoped pr", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing (explicit lists of perm", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (credentials never in", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (each agent instance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (authorization c", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 AI g", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Just-in-time (JIT) access; Part III \u2014 Priv", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Short-lived, identity-provider-issued cred", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Behavior (goal/behavioral drift); Part III", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Measure what matters (Dwell time and cover", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part V \u2014 Establish emergency change procedures in advance; P", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:anthropic_zt_agents", "target": "clause:anthropic_zt_agents:Part V \u2014 Trust through verification for defensive agents", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_artifact", "target": "clause:aws_artifact:Artifact agreement", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_artifact", "target": "clause:aws_artifact:AWS security posture documentation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_artifact", "target": "clause:aws_artifact:Compliance report access", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_artifact", "target": "clause:aws_artifact:Compliance Reports", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_artifact", "target": "clause:aws_artifact:FedRAMP High Package", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_artifact", "target": "clause:aws_artifact:Third-party audit report", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_guardrails", "target": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 content evaluation for arbitrary payloa", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_guardrails", "target": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 per-request policy evaluation results", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_guardrails", "target": "clause:aws_bedrock_guardrails:Content filters \u2014 input screening", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_guardrails", "target": "clause:aws_bedrock_guardrails:Content filters \u2014 per-request blocking (no agent suspension)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_guardrails", "target": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_guardrails", "target": "clause:aws_bedrock_guardrails:Content filters \u2014 real-time policy screening", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_guardrails", "target": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_guardrails", "target": "clause:aws_bedrock_guardrails:Content filters applied to agent responses", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_guardrails", "target": "clause:aws_bedrock_guardrails:Contextual grounding checks", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_guardrails", "target": "clause:aws_bedrock_guardrails:Denied topics", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_guardrails", "target": "clause:aws_bedrock_guardrails:Denied topics and content filters", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_guardrails", "target": "clause:aws_bedrock_guardrails:Guardrail trace in agent invocation output", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_guardrails", "target": "clause:aws_bedrock_guardrails:Sensitive information filters", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_kb", "target": "clause:aws_bedrock_kb:Guardrails \u2014 content filters and contextual grounding check", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_kb", "target": "clause:aws_bedrock_kb:Guardrails \u2014 contextual grounding check", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_kb", "target": "clause:aws_bedrock_kb:Knowledge Base data source configuration", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_kb", "target": "clause:aws_bedrock_kb:Knowledge Base Data Source Configuration", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_kb", "target": "clause:aws_bedrock_kb:Knowledge Base Data Source Permissions", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_kb", "target": "clause:aws_bedrock_kb:Knowledge Base Metrics and Evaluation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_kb", "target": "clause:aws_bedrock_kb:Knowledge Bases \u2014 data source sync and ingestion job status", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_kb", "target": "clause:aws_bedrock_kb:Knowledge Bases \u2014 Retrieve API relevance scores", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_bedrock_kb", "target": "clause:aws_bedrock_kb:Knowledge Bases audit logging and compliance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_financial", "target": "clause:aws_financial:AWS Artifact", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_financial", "target": "clause:aws_financial:AWS Audit Manager", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_financial", "target": "clause:aws_financial:AWS CloudTrail", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_financial", "target": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_financial", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS CloudTrail \u2014 Assume Role Audit Trail", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS CloudTrail \u2014 Credential Sharing Detection", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity Validation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS CloudTrail \u2014 Organization Trail", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS CloudTrail Insights \u2014 Behavior Baseline", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS GuardDuty \u2014 Automated Incident Response", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS GuardDuty \u2014 IAM Finding Types", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS GuardDuty \u2014 Instance Credential Exfiltration", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS GuardDuty \u2014 Privilege Escalation Findings", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM \u2014 Break Glass Role", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Assume Conditions", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Chaining", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM \u2014 Cross Account Trust Policies", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM \u2014 Identity Provider Federation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM \u2014 Permission Boundaries", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM \u2014 Privileged Role MFA Condition", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM \u2014 Regional STS Endpoints", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM \u2014 Role Deletion Revocation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM \u2014 Role Session Revocation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Continuous Access Review", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Unused Access Findings", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM Best Practices \u2014 Least Privilege", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM Best Practices \u2014 Separate Human Workload Identity", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM Best Practices \u2014 Use Roles Not Users", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 Certificate Binding", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 HSM Integration", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM Tagging \u2014 Principal Tags", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS IAM Tagging \u2014 Resource Owner Tags", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS Organizations SCPs \u2014 Provisioning Restriction", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS Secrets Manager \u2014 Automated Rotation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS Security Hub \u2014 Identity Security Metrics", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS STS \u2014 Assume Role Session Policies", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS STS \u2014 Role Chaining Session Policy", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS STS \u2014 Session Policies Task Scoped", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS Trusted Advisor \u2014 Exposed Access Keys / Amazon GuardDuty", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS Well-Architected SEC02-BP03 \u2014 Secrets Management", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_iam", "target": "clause:aws_iam:AWS Well-Architected Security Pillar \u2014 SEC02 (identity and a", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_lake_formation", "target": "clause:aws_lake_formation:Amazon Macie", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_lake_formation", "target": "clause:aws_lake_formation:Amazon S3 \u2014 Object Integrity and Checksums", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_lake_formation", "target": "clause:aws_lake_formation:AWS Glue Data Quality (DQDL rulesets)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_lake_formation", "target": "clause:aws_lake_formation:AWS Glue Schema Registry", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:Amazon Bedrock Policies \u2014 Organization-Level Guardrail Enfor", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Artifact \u2014 Compliance Documentation for Contractual Obli", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Artifact \u2014 Contract Review Gate Documentation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Artifact \u2014 On-Demand Regulatory Compliance Disclosure", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Attestation Artifact Ge", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Evidence Archive", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Audit Manager \u2014 Contract Compliance Evidence Collection", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Audit Manager \u2014 Deployment Scope Evidence Collection", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Audit Manager \u2014 Internal Audit Evidence Package Generati", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Audit Manager Custom Frameworks \u2014 Board-Ready Governance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Break-Glass Account Procedure \u2014 SCP Exception with Full", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS CloudTrail \u2014 Principal Accountability Binding for All AP", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Immutable Contract Audit Tr", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Procurement Audit Trail", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Tamper-Evident Approval Rec", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS CloudTrail + EventBridge \u2014 SCP and IAM Policy Change Det", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Config \u2014 Configuration Drift Detection for Knowledge Res", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Config \u2014 Contractual Requirement Conflict Detection", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Config \u2014 Knowledge Resource Configuration Drift Detectio", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Config + Security Hub \u2014 Continuous Policy Adherence Moni", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Config Continuous Compliance \u2014 Contract Obligation Monit", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Config Rules + CloudTrail Alerting \u2014 Authority Limit Vio", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Control Tower + Marketplace Governance \u2014 Third-Party Pol", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Control Tower Detective Controls \u2014 Policy Violation Esca", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Control Tower Landing Zone \u2014 Centralized Policy Registry", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Control Tower Proactive Controls \u2014 Change Governance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS IAM Permission Boundaries \u2014 Delegation Scope Enforcement", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Marketplace + Control Tower \u2014 Procurement Policy Integra", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Marketplace + Partner Network \u2014 Vendor Qualification Fra", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Organizations + CloudTrail \u2014 SCP Change History and IaC-", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Organizations SCP \u2014 Approved Data Source Restriction", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Organizations SCP + Amazon Macie \u2014 Data Use Policy Enfor", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 AI-Initiated Financial", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 Approval Limit Control", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Organizations SCP Design \u2014 Scope Boundary Enforcement", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Resource Access Manager \u2014 Cross-Account Share Acceptance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS SCP \u2014 AI Agent External Communication Service Restrictio", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Security Hub \u2014 Cross-Domain Policy Evidence Normalizatio", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Security Hub \u2014 Policy Incident Classification and Routin", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Security Hub + Audit Manager \u2014 Policy Governance Reports", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Security Hub Findings History \u2014 Policy Improvement Input", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:AWS Service Level Agreements + CloudWatch \u2014 SLA Governance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_organizations", "target": "clause:aws_organizations:CloudTrail + AWS GuardDuty \u2014 Behavioral Anomaly Detection fo", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:Amazon Cognito and AWS IAM \u2014 identity verification capabilit", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:Amazon Comprehend \u2014 PII detection and redaction", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:Amazon Macie \u2014 sensitive data discovery and anomaly findings", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:Amazon Macie Sensitive Data Discovery", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:Amazon SageMaker Ground Truth \u2014 synthetic data generation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 data and model quality drif", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 inference quality monitorin", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Artifact \u2014 jurisdiction-organized compliance reports and", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Artifact \u2014 on-demand compliance reports", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Audit Manager \u2014 framework-based assessments", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS CloudTrail \u2014 API event logging", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS CloudTrail \u2014 immutable governance logging", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS CloudTrail with S3 Object Lock \u2014 WORM evidence archive", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Config custom rules \u2014 configuration compliance checks", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Customer Compliance Center \u2014 regulatory resources", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS data lifecycle management \u2014 S3 Lifecycle and RDS retenti", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Data Processing Addendum (GDPR DPA)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS data transfer resources \u2014 customer TIA support", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS GDPR compliance resources \u2014 customer DPIA support", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS GDPR compliance whitepaper \u2014 data transfer mechanisms", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Glue DataBrew \u2014 PII masking and redaction transformation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS ISO/IEC 42001 accredited certification \u2014 AI services", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS ISO/IEC 42001 certification \u2014 AI management system impac", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS ISO/IEC 42001 certification and SOC 2 \u2014 vendor assurance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS KMS and S3 server-side encryption \u2014 AES-256 at rest, TLS", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Lake Formation \u00a7Column/Row-Level Security for Minimizati", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Lake Formation and Glue Data Catalog \u2014 centralized gover", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Lake Formation Data Catalog", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Lake Formation Fine-Grained Access Control", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Security Hub \u2014 findings aggregation and automated respon", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Security Incident Response Guide", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Shared Responsibility Model \u2014 customer obligations for c", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_privacy", "target": "clause:aws_privacy:AWS Well-Architected Machine Learning Lens \u2014 security and pr", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:AWS Well-Architected Framework \u2014 Well-Architected Review: st", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Failure management", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Resilience design", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Testing reliabilit", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:Failure management \u2014 recovery procedures", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:Failure management \u2014 RTO/RPO alignment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:Foundations \u2014 organizational prerequisites for reliability", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:REL 1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:REL 10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:REL 11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:REL 12", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:REL 13", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:REL 5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:REL 6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:REL 8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:REL 9", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:aws_reliability", "target": "clause:aws_reliability:Resilience design principles", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:bcbs_239", "target": "clause:bcbs_239:Principle 10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:bcbs_239", "target": "clause:bcbs_239:Principle 11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:bcbs_239", "target": "clause:bcbs_239:Principle 2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:bcbs_239", "target": "clause:bcbs_239:Principle 3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:bcbs_239", "target": "clause:bcbs_239:Principle 7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:bcbs_239", "target": "clause:bcbs_239:Principle 8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:bcbs_239", "target": "clause:bcbs_239:Principle 9", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:bcbs_239", "target": "clause:bcbs_239:Principles 2 & 3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:bcbs_239", "target": "clause:bcbs_239:Principles 2-4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:c2pa", "target": "clause:c2pa:Content Credentials (C2PA manifests)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ccpa", "target": "clause:ccpa:1798.100", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ccpa", "target": "clause:ccpa:1798.105", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ccpa", "target": "clause:ccpa:1798.110", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ccpa", "target": "clause:ccpa:1798.120", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ccpa", "target": "clause:ccpa:1798.121", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ccpa", "target": "clause:ccpa:1798.130", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ccpa", "target": "clause:ccpa:1798.135", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ccpa", "target": "clause:ccpa:1798.140", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ccpa", "target": "clause:ccpa:1798.150", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ccpa", "target": "clause:ccpa:1798.185", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cfpb_ai", "target": "clause:cfpb_ai:Circular 2022-03 \u2014 adverse action for credit decisions based", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cis_controls_v8", "target": "clause:cis_controls_v8:CIS Control 11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cis_controls_v8", "target": "clause:cis_controls_v8:Control 11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cis_controls_v8", "target": "clause:cis_controls_v8:Control 16", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cis_controls_v8", "target": "clause:cis_controls_v8:Control 8.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cisa_ai_guidance", "target": "clause:cisa_ai_guidance:Line of Effort 2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cisa_ai_guidance", "target": "clause:cisa_ai_guidance:Line of Effort 3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cisa_ai_guidance", "target": "clause:cisa_ai_guidance:Line of Effort 4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cisa_zt", "target": "clause:cisa_zt:Governance (cross-cutting capability)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cisa_zt", "target": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cisa_zt", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cisa_zt", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cisa_zt", "target": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cisa_zt", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cloudflare_resilience", "target": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 DDoS protection and load balancing f", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cloudflare_resilience", "target": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Edge resilience patterns: stateless", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cloudflare_resilience", "target": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Load balancing and failover, DDoS pr", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cloudflare_resilience", "target": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Rate limiting for API protection and", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cloudflare_resilience", "target": "clause:cloudflare_resilience:Load balancing and failover \u2013 Geo-distributed AI inference e", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cloudflare_resilience", "target": "clause:cloudflare_resilience:Load balancing and failover \u2013 Multi-origin failover for AI A", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cloudflare_resilience", "target": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health checks and origin valid", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cloudflare_resilience", "target": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based origin routing", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cloudflare_resilience", "target": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based steering policies", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cloudflare_resilience", "target": "clause:cloudflare_resilience:Rate limiting and DDoS protection", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cloudflare_resilience", "target": "clause:cloudflare_resilience:Rate limiting for API protection", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cnil_ai", "target": "clause:cnil_ai:How-to sheet 2 \u2014 Defining a purpose", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:co_ai_act", "target": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO01.06", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO02.06", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO04.04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO07", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO09.04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO10.03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO11.03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO11.04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO11.05", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO12.02", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO12.04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO12.06", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:APO14.01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:BAI02.01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:BAI03.02", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:BAI03.07", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:BAI03.08", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:DSS01.03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:DSS02.02", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:DSS02.07", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:DSS04.07", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:DSS05.04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:DSS06.03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:DSS06.04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:DSS06.05", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:EDM01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:MEA01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:MEA01.04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:MEA01.05", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:MEA02", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:MEA02.01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:MEA02.02", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:MEA02.04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:MEA03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:MEA03.01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:MEA03.02", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:MEA03.03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:MEA03.04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_2019", "target": "clause:cobit_2019:MEA04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_dss04", "target": "clause:cobit_dss04:DSS04.01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_dss04", "target": "clause:cobit_dss04:DSS04.02", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_dss04", "target": "clause:cobit_dss04:DSS04.03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_dss04", "target": "clause:cobit_dss04:DSS04.04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_dss04", "target": "clause:cobit_dss04:DSS04.05", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_dss04", "target": "clause:cobit_dss04:DSS04.05 \u2014 Review, Maintain, and Improve Continuity Plans", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_dss04", "target": "clause:cobit_dss04:DSS04.06", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:cobit_dss04", "target": "clause:cobit_dss04:DSS04.08", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Component 1 \u2014 Attract and Retain Capable Individuals", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Component 1 \u2014 Board Oversight", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Component 1 \u2014 Governance and Culture", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Component 2 \u2014 Risk Appetite", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Component 2: Objective Setting", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Component 4 \u2014 Review and Revision", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Component 5 \u2014 Reporting", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 10 \u2014 Identifies Risk", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 13", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 13 \u2014 Implements Risk Responses", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 15", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 15 \u2014 Assesses Substantial Change", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 16", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 17", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 17 \u2014 Pursues Improvement in Enterprise Risk Manage", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 19", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 2 \u2014 Establishes Operating Structures", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 20", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 20 \u2014 Reports on risk, culture, and performance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 7 \u2014 Defines risk appetite", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_erm", "target": "clause:coso_erm:Principle 9 \u2014 Formulates business objectives", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Component 1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Component 1 \u2014 Control Environment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Component 2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Component 2 \u2014 Risk Assessment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Component 3 \u2014 Control Activities", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Principle 10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Principle 11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Principle 12", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Principle 14", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Principle 16", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Principle 17", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Principle 2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Principle 2 \u2014 Control Environment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Principle 3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Principle 6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Principles 10-11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Principles 10-12", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:coso_icfr", "target": "clause:coso_icfr:Principles 16-17", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_ai_caiq", "target": "clause:csa_ai_caiq:GRC-07", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:AIS-05", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:AIS-09", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:AIS-10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:AIS-11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:AIS-13", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:AIS-15", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:CCC-01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:CCC-02", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:CCC-03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:CCC-04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:CCC-06", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:DSP-10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:DSP-17", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:DSP-20", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:DSP-21", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:DSP-23", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:GRC (operational / cost risk)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:GRC-01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:GRC-02", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:GRC-06", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:I&S-03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:I&S-06", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:IAM-03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:IAM-05", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:IAM-08", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:IAM-10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:IAM-12", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:IAM-14", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:IAM-15", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:IAM-18", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:LOG-03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:LOG-05", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:LOG-07", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:LOG-09", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:LOG-16", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:MDS-06", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:MDS-08", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:MDS-09", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:MDS-12", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:SEF-06", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:SEF-09", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:STA-08", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:STA-09", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:TVM (Threat & Vulnerability Management \u2014 Security Testing)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aicm", "target": "clause:csa_aicm:TVM-05", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:APP-02.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:APP-03.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:APP-03.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:APP-04.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:APP-04.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:APP-04.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:APP-05.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:DAT-02.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:DAT-03.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:DAT-04.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:DAT-04.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:DAT-05.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:DEV-02.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:DEV-03.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:DEV-03.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:DEV-03.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:DEV-04.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:DEV-04.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:GOV-03.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:GOV-03.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:GOV-04.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:GOV-05.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IAM-02.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IAM-03.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IAM-03.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IAM-04.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IAM-04.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IAM-04.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IAM-05.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IAM-05.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IAM-05.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:INF-03.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:INF-04.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:INF-04.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IR-02.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IR-04.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IR-04.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IR-05.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:IR-05.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:MOD-02.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:MOD-04.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:MOD-05.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:MON-02.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:MON-03.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:MON-03.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:MON-04.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:MON-04.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:MON-04.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:MON-05.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:ORG-02.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:ORG-04.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:ORG-05.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:RSK-02.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:csa_aismm", "target": "clause:csa_aismm:RSK-05.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dama_dmbok", "target": "clause:dama_dmbok:Ch. 10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dama_dmbok", "target": "clause:dama_dmbok:Ch. 12", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dama_dmbok", "target": "clause:dama_dmbok:Ch. 13", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dama_dmbok", "target": "clause:dama_dmbok:Ch. 14", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dama_dmbok", "target": "clause:dama_dmbok:Ch. 15", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dama_dmbok", "target": "clause:dama_dmbok:Ch. 3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dama_dmbok", "target": "clause:dama_dmbok:Ch. 4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dama_dmbok", "target": "clause:dama_dmbok:Ch. 6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dama_dmbok", "target": "clause:dama_dmbok:Ch. 7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dama_dmbok", "target": "clause:dama_dmbok:Ch. 8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dama_dmbok", "target": "clause:dama_dmbok:Ch. 9", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:data_contract_spec", "target": "clause:data_contract_spec:Schema and Terms sections", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Column-Level Lineage", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Data lineage and catalog metadata", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Databricks Lakehouse Monitoring", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Databricks Lakehouse Monitoring \u2014 Metric Tables", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Delta Lake \u2014 time travel and version history", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Delta Lake schema enforcement and evolution", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Delta Lake time travel", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Delta Sharing (open protocol)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Lakehouse Monitoring", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Unity Catalog", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Unity Catalog \u2014 Data Lineage and Auditing", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Unity Catalog \u2014 data lineage for ingestion jobs", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Unity Catalog \u2014 External Locations and Credentials", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Unity Catalog \u2014 fine-grained access control", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Unity Catalog \u2014 Tags and Column-Level Security", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Unity Catalog Data Lineage and Impact Analysis", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:databricks_unity", "target": "clause:databricks_unity:Unity Catalog lineage", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dcam", "target": "clause:dcam:Capability 2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dcam", "target": "clause:dcam:Capability 3.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dcam", "target": "clause:dcam:Capability 5.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dcam", "target": "clause:dcam:Capability 5.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dcam", "target": "clause:dcam:Capability 5.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dcam", "target": "clause:dcam:Capability 6.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dcam", "target": "clause:dcam:Component 3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dcam", "target": "clause:dcam:Component 7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:doj_ai", "target": "clause:doj_ai:ADA application to algorithmic hiring tools ('screen out' di", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dora", "target": "clause:dora:11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dora", "target": "clause:dora:12", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dora", "target": "clause:dora:13", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dora", "target": "clause:dora:17", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dora", "target": "clause:dora:19", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dora", "target": "clause:dora:25", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dora", "target": "clause:dora:26", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dora", "target": "clause:dora:28", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dora", "target": "clause:dora:30", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dora", "target": "clause:dora:5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dora", "target": "clause:dora:6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dora", "target": "clause:dora:7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dora", "target": "clause:dora:9", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dpdp", "target": "clause:dpdp:3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dpdp", "target": "clause:dpdp:6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:dpdp", "target": "clause:dpdp:ch. III", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:edpb_opinion_28_2024", "target": "clause:edpb_opinion_28_2024:3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:edpb_opinion_28_2024", "target": "clause:edpb_opinion_28_2024:3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:edpb_opinion_28_2024", "target": "clause:edpb_opinion_28_2024:3.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eeoc_ai", "target": "clause:eeoc_ai:Adverse impact assessment under Title VII (Q&A technical ass", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eidas2", "target": "clause:eidas2:19a", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eidas2", "target": "clause:eidas2:20", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eidas2", "target": "clause:eidas2:45b", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eidas2", "target": "clause:eidas2:5a", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eidas2", "target": "clause:eidas2:6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eidas2", "target": "clause:eidas2:Regulation (EU) 2024/1183", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:enisa_ai", "target": "clause:enisa_ai:Cybersecurity of AI and Standardisation (2023) \u2014 document-le", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:etsi_gr_sai_005", "target": "clause:etsi_gr_sai_005:5.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:etsi_gr_sai_005", "target": "clause:etsi_gr_sai_005:6.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:12", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:13", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:14", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:15", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:16", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:17", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:18", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:19", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:20", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:23", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:25", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:26", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:27", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:43", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:47", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:49", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:50", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:53", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:55", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:72", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:73", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:74", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:85", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:86", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:9", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:Annex III", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_ai_act", "target": "clause:eu_ai_act:Annex IV", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_charter", "target": "clause:eu_charter:1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_charter", "target": "clause:eu_charter:21", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_charter", "target": "clause:eu_charter:24", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_charter", "target": "clause:eu_charter:26", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_charter", "target": "clause:eu_charter:47", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_charter", "target": "clause:eu_charter:8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_data_act", "target": "clause:eu_data_act:3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_data_gov_act", "target": "clause:eu_data_gov_act:20", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:eu_data_gov_act", "target": "clause:eu_data_gov_act:5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:fapi_2_0", "target": "clause:fapi_2_0:\u00a75.3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:fedramp_20x", "target": "clause:fedramp_20x:KSI-MLA", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ffiec", "target": "clause:ffiec:IT Handbook \u2014 Development, Acquisition, and Maintenance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:finra", "target": "clause:finra:Regulatory Notice 24-09 (GenAI and LLMs)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ftc_ai", "target": "clause:ftc_ai:FTC Act \u00a75 (unfair or deceptive practices) \u2014 2021 blog guida", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:12", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:15", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:17", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:20", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:21", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:22", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:24", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:25", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:28", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:30", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:31", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:32", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:33", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:34", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:35", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:38", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:39", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:42", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:44", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:46", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:9", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:gdpr", "target": "clause:gdpr:Chapter V", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_ai_principles", "target": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_ai_principles", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 alignment with wide", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_ai_principles", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_ai_principles", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_ai_principles", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_compliance", "target": "clause:google_compliance:Certification documentation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_compliance", "target": "clause:google_compliance:Compliance report", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_compliance", "target": "clause:google_compliance:Compliance Reports Manager", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_compliance", "target": "clause:google_compliance:FedRAMP High", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_compliance", "target": "clause:google_compliance:Regulatory guidance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_compliance", "target": "clause:google_compliance:Shared responsibility matrix", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_dataplex", "target": "clause:google_dataplex:Auto Data Quality", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_dataplex", "target": "clause:google_dataplex:BigQuery schema management", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_dataplex", "target": "clause:google_dataplex:Cloud Storage \u2014 Object Integrity and Retention Lock", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_dataplex", "target": "clause:google_dataplex:Data Lineage API", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_dataplex", "target": "clause:google_dataplex:Dataplex Auto Data Quality (scheduled/batch scans)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_dataplex", "target": "clause:google_dataplex:Dataplex Data Profile Scans", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_dataplex", "target": "clause:google_dataplex:Dataplex Data Quality \u2014 Quality Rules", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_dataplex", "target": "clause:google_dataplex:Dataplex Universal Catalog (Data Catalog successor)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_financial", "target": "clause:google_financial:Cloud IAM", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_financial", "target": "clause:google_financial:Explainable AI", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_financial", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_financial", "target": "clause:google_financial:Model Cards", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_financial", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_financial", "target": "clause:google_financial:Vertex AI Model Registry", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Compliance-Certified Service Rest", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Continuous Regulatory Contract Co", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Data Sovereignty and Use Restrict", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Regulatory Obligation Constraint", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Sovereign Compliance Conflict Det", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Admin Activity Audit Logs \u2014 Procurement Event R", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Change Det", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Version Mo", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Asset Inventory + Organization Policy \u2014 Ongoing", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Asset Inventory + Pub/Sub \u2014 Real-Time Policy Ch", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies \u2014 Constraint", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies + Policy Sim", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Immutable Approval Event Records", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Non-Repudiable Principal Binding", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Audit Logs + Policy Analyzer \u2014 Internal Audit E", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Custom Org Policy \u2014 Governance Program Coverage", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud IAM Recommender \u2014 Least-Privilege Policy Improv", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud IAM Resource Hierarchy \u2014 Inherited Authority Li", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Marketplace + Org Policy \u2014 Approved AI Service", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Org Policy \u2014 Third-Party Integration Restrictio", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Managed Constraint Compli", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Policy Simulation for Con", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Resource Constraint Enfor", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Service Usage Restriction", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Organization Policy + Cloud Asset Inventory \u2014 G", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Organization Policy Dry-Run \u2014 Safe Policy Versi", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Organization Policy Monitoring \u2014 Authority Boun", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Organization Policy Service \u2014 Centralized Machi", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud PAM Emergency Access \u2014 Justified Time-Bounded B", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud PAM Multi-Level Approval \u2014 Dual-Authorization W", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Approval-Gated Elev", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Multi-Level Approva", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Cross-Domain Evidence", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Policy Violation Tria", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud Security Foundations Blueprint \u2014 Pre-Deployment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Cloud SLA Terms + Assured Workloads \u2014 Commitment Enfo", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_org_policy", "target": "clause:google_org_policy:Google Gemini Enterprise Agent Platform \u2014 Agent Access Contr", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Agent Observability", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Agent User Control (SAIF control)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Core element \u2014 Adapt controls to adjust mitigations and crea", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Core element \u2014 Expand strong security foundations to the AI", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Admin Activity", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Logs", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud Audit Logs \u2014 Organization Log Sink", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud IAM \u2014 Dedicated Service Accounts", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud IAM \u2014 HSM Service Account Keys", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud IAM Best Practices \u2014 Least Privilege Roles", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud Secret Manager \u2014 Credential Hygiene", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 de-identification A", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 output inspection a", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 pseudonymization an", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud Sensitive Data Protection (Cloud DLP)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud WIF \u2014 External OIDC Verification", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud WIF \u2014 STS Token Exchange", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Keyless Authenti", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Short Lived Toke", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google SAIF \u2014 Expand strong security foundations (least-priv", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google SAIF \u2014 Extend detection and response to AI (behaviora", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Security Command Center \u2014 privilege escalation detect", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Google Security Command Center \u2014 Threat Detection", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Incident Response Management (SAIF control)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Inferred Sensitive Data risk \u2014 Output Validation and Sanitiz", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Inferred Sensitive Data risk \u2014 Training Data Management / Ou", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Insecure Integrated Component risk", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Model and Data Inventory Management", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Privacy Enhancing Technologies", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Secure-by-Default ML Tooling", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Sensitive Data Disclosure risk \u2014 Output Validation and Sanit", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Training Data Management", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Training Data Management \u2014 provenance and lineage", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:Unauthorized Training Data risk \u2014 Training Data Management", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:User Data Management \u2014 mitigates Excessive Data Handling", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_saif", "target": "clause:google_saif:User Data Management \u2014 telemetry and log data", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Cascading failure prevention", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Ch. 14", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Ch. 2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Ch. 21", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Ch. 22", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Ch. 26", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Ch. 3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Ch. 32", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Ch. 33", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Ch. 8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Disaster Recovery Testing (DiRT) and game days", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Error budget policies", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Error budget policies \u2013 Multi-region SLO maintenance and fai", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Error budget policies \u2014 Service tier definition by SLO", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Google SRE \u2014 Incident management, postmortem practices, and", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Google SRE \u2014 Postmortem practices and error budget policies:", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Google SRE \u2014 Postmortem practices and production readiness r", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Google SRE \u2014 Production readiness review and change manageme", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Incident management \u2014 Incident Commander role and structured", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Incident management \u2014 Verification of data consistency befor", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Incident management and postmortem practices", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Incident management and Production Readiness Review", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Postmortem Culture \u2013 Blameless postmortems with tracked acti", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Postmortem practices \u2014 Structured incident report with timel", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Postmortem practices \u2014 Timestamped action log and incident t", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Postmortem practices and PRR \u2013 Resilience evidence from SRE", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Production readiness review", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Production Readiness Review \u2013 Reliability and resilience con", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Production Readiness Review \u2013 Third-party dependency resilie", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Production readiness review \u2014 Availability requirements", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Production Readiness Review \u2014 Data infrastructure recovery r", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Production Readiness Review \u2014 Failover procedures and incide", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Production Readiness Review \u2014 Rollback readiness criteria", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Production readiness review: fault tolerance criteria", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:SLO management \u2014 Error budget consumption and SLA breach det", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:SLO/Error Budget Policy \u2013 Defining and enforcing availabilit", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:SLO/SLA management and error budget policies", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_sre", "target": "clause:google_sre:Toil reduction and on-call practices", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_vertex_rag", "target": "clause:google_vertex_rag:Check Grounding API", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_vertex_rag", "target": "clause:google_vertex_rag:Grounded generation \u2014 grounding support scores", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_vertex_rag", "target": "clause:google_vertex_rag:Grounded generation \u2014 grounding supports and citations", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_vertex_rag", "target": "clause:google_vertex_rag:Grounding \u2014 Data Source Configuration", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_vertex_rag", "target": "clause:google_vertex_rag:Grounding and Citation APIs", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_vertex_rag", "target": "clause:google_vertex_rag:Grounding citations and source attribution", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_vertex_rag", "target": "clause:google_vertex_rag:RAG grounding quality configuration", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_vertex_rag", "target": "clause:google_vertex_rag:Vertex AI RAG \u2014 metadata filters at query time", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:google_vertex_rag", "target": "clause:google_vertex_rag:Vertex AI RAG Engine \u2014 retrieval telemetry and evaluation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Bias metric selection (metric matched to task and fairness d", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Bias mitigation algorithms (reweighing, adversarial debiasin", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Dataset and classifier fairness metrics", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Demographic parity difference and equalized odds difference", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Disaggregated (subgroup) performance metrics", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Disparate impact metric", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Disparate impact metric (four-fifths rule)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Fairness metric computation (batch, schedulable on productio", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Fairness metric suite (demographic parity difference, equali", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Fairness metric taxonomy (~70 metrics)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Fairness metrics (quantitative outcome indicators)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Fairness metrics (vendor due-diligence benchmark)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Fairness metrics and mitigation algorithms (training curricu", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Protected attribute specification (privileged/unprivileged g", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ibm_ai_fairness", "target": "clause:ibm_ai_fairness:Subgroup fairness metrics and bias mitigation algorithms", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:\u00a710", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:\u00a711", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:\u00a75", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:\u00a75.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:\u00a76.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:\u00a77", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:\u00a77.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:\u00a79", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:\u00a79.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:Clause 10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:Clause 11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:Clause 7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:Clause 8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ieee_7000", "target": "clause:ieee_7000:Clause 9", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:imda_mgf", "target": "clause:imda_mgf:1.2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:imda_mgf", "target": "clause:imda_mgf:2.1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:imda_mgf", "target": "clause:imda_mgf:2.1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:imda_mgf", "target": "clause:imda_mgf:2.2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:imda_mgf", "target": "clause:imda_mgf:2.2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:imda_mgf", "target": "clause:imda_mgf:2.3.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:imda_mgf", "target": "clause:imda_mgf:2.3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:imda_mgf", "target": "clause:imda_mgf:2.3.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:imda_mgf", "target": "clause:imda_mgf:2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:10.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:5.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:5.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:6.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:7.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:8.2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:8.2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:8.3.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:8.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:8.4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:8.4.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:8.4.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:8.4.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:8.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:9.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_22301", "target": "clause:iso_22301:9.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_23894", "target": "clause:iso_23894:4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_24760", "target": "clause:iso_24760:7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_24760", "target": "clause:iso_24760:7.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_24760", "target": "clause:iso_24760:8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_24760", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27001", "target": "clause:iso_27001:4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27001", "target": "clause:iso_27001:A.5.23", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27001", "target": "clause:iso_27001:A.5.31", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27001", "target": "clause:iso_27001:A.5.33", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27001", "target": "clause:iso_27001:A.5.9", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27001", "target": "clause:iso_27001:A.8.15", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27001", "target": "clause:iso_27001:A.8.8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27002", "target": "clause:iso_27002:5.10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27002", "target": "clause:iso_27002:5.12", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27002", "target": "clause:iso_27002:5.15", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27002", "target": "clause:iso_27002:5.19", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27002", "target": "clause:iso_27002:5.36", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27002", "target": "clause:iso_27002:8.10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27002", "target": "clause:iso_27002:8.15", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27002", "target": "clause:iso_27002:8.8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27031", "target": "clause:iso_27031:10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27031", "target": "clause:iso_27031:11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27031", "target": "clause:iso_27031:13", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27031", "target": "clause:iso_27031:8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:5.7.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:5.7.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:5.8.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:6.13", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:6.5.2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:6.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:6.9.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.2.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.2.8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.3.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.3.9", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.4.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.4.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.4.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.4.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.4.9", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.5.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:7.5.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:8.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:8.2.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:8.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:8.5.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:8.5.8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_27701", "target": "clause:iso_27701:PIMS certification (standard as a whole)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_30401", "target": "clause:iso_30401:10.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_30401", "target": "clause:iso_30401:4.4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_30401", "target": "clause:iso_30401:4.4.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_30401", "target": "clause:iso_30401:5.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_30401", "target": "clause:iso_30401:5.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_30401", "target": "clause:iso_30401:6.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_30401", "target": "clause:iso_30401:7.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_30401", "target": "clause:iso_30401:7.5.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_30401", "target": "clause:iso_30401:8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_30401", "target": "clause:iso_30401:9.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_30401", "target": "clause:iso_30401:9.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_30401", "target": "clause:iso_30401:9.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_31000", "target": "clause:iso_31000:6.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_31000", "target": "clause:iso_31000:6.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_31000", "target": "clause:iso_31000:6.5.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_31000", "target": "clause:iso_31000:6.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_31000", "target": "clause:iso_31000:6.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:\u00a7 4.6 \u2014 Compliance risk assessment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:\u00a7 6.3 \u2014 Planning of changes", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:\u00a7 7.2 \u2014 Competence", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:10.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:10.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:4.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:4.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:5.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:5.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:6.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:6.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:7.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:7.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:7.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:7.5.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:8.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:8.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:9.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:9.1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:9.1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:9.1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:9.1.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:9.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:9.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_37301", "target": "clause:iso_37301:9.3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:10.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:10.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:4.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:4.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:5.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:5.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:5.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:6.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:6.1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:6.1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:6.1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:6.1.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:6.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:7.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:7.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:7.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:7.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:8.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:8.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:8.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:9.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:9.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:9.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.10.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.4.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.4.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.5.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.6.2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.6.2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.6.2.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.6.2.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.6.2.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.6.2.8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.7.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.7.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.7.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.7.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.8.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.8.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.8.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.9.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_42001", "target": "clause:iso_42001:A.9.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_5259", "target": "clause:iso_5259:5259-1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_8000", "target": "clause:iso_8000:8000-110", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_8000", "target": "clause:iso_8000:8000-120", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_8000", "target": "clause:iso_8000:8000-61", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:iso_8000", "target": "clause:iso_8000:8000-8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:itil_4", "target": "clause:itil_4:\u00a75.1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:itil_4", "target": "clause:itil_4:\u00a75.1.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:itil_4", "target": "clause:itil_4:\u00a75.2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:itil_4", "target": "clause:itil_4:\u00a75.2.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:itil_4", "target": "clause:itil_4:Continual Improvement Practice", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:itil_4", "target": "clause:itil_4:Incident Management Practice", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:lgpd", "target": "clause:lgpd:37", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:meta_llama_rai", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:meta_llama_rai", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms; Llama Acceptabl", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:meta_llama_rai", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:meta_llama_rai", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibited", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:meta_llama_rai", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibitio", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:meta_llama_rai", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document); Build trans", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:meta_llama_rai", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:meta_llama_rai", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:meta_llama_rai", "target": "clause:meta_llama_rai:Responsible AI considerations (fairness and inclusion)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:meta_llama_rai", "target": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:meta_llama_rai", "target": "clause:meta_llama_rai:Responsible Use Guide (provider guidance); Llama Acceptable", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:meta_llama_rai", "target": "clause:meta_llama_rai:System-level alignment \u2014 input/output mitigations; Llama Acc", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_ai", "target": "clause:microsoft_azure_ai:Azure AI Compliance \u2014 Evidence Collection for Audits", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_ai", "target": "clause:microsoft_azure_ai:Azure AI Search \u2014 Index Schema", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_ai", "target": "clause:microsoft_azure_ai:Azure AI Search \u2014 monitoring and search traffic analytics", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_ai", "target": "clause:microsoft_azure_ai:Azure AI Search index scope configuration", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_ai", "target": "clause:microsoft_azure_ai:Azure AI Search Security Filters", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Azure Resiliency \u2014 Availability zone design and geo-redundan", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 BCDR documentation, failover test", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 design guidance for regulated work", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Design lifecycle integration: BCDR", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Geo-redundant storage design, Azur", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 infrastructure-as-code recovery (A", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR \u2013 Chaos testing and resilience validation (Azure Chaos", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR \u2013 Graceful degradation design and availability zone fai", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR \u2013 Post-incident review and recovery objective validatio", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR \u2013 Recovery objectives (RTO/RPO) definition and validati", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR \u2013 Testing and validation of failover and recovery contr", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR \u2013 Third-party service dependency continuity planning", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR \u2014 Data backup, geo-redundant recovery, and RPO verifica", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR \u2014 Failover configuration and availability zone design", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR design guidance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Business continuity planning methodol", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Deployment rollback and blue-green re", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Geo-redundancy and failover configura", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Post-recovery documentation and compl", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery documentation and activity l", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery objectives and failover conf", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Testing and validation program", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:BCDR documentation: fault tolerance evidence", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Bulkhead pattern", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Business continuity planning", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Business continuity planning \u2013 BCDR evidence documentation a", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Business continuity planning \u2014 Communication procedures and", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Circuit Breaker Pattern \u2014 Azure Architecture Center", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Durable Functions checkpoint", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Failover configuration \u2014 Blue/green deployment and deploymen", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Failover configuration \u2014 Return-to-service validation and pr", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Failover configuration and recovery objectives", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:RE:05", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:RE:09", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 BCDR design guidance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 Business continuity tiering by service", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_azure_resil", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 RTO/RPO measurement and BCDR complianc", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_compliance", "target": "clause:microsoft_compliance:Assessment template", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_compliance", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_compliance", "target": "clause:microsoft_compliance:Compliance Manager platform", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_compliance", "target": "clause:microsoft_compliance:Compliance score", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_compliance", "target": "clause:microsoft_compliance:Compliance Score", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_compliance", "target": "clause:microsoft_compliance:Compliance score monitoring", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_compliance", "target": "clause:microsoft_compliance:Control mapping", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_compliance", "target": "clause:microsoft_compliance:FedRAMP High & DoD IL5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_compliance", "target": "clause:microsoft_compliance:Improvement Action", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_compliance", "target": "clause:microsoft_compliance:Improvement actions", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_compliance", "target": "clause:microsoft_compliance:Improvement Actions", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_compliance", "target": "clause:microsoft_compliance:ISO 42001 assessment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_purview", "target": "clause:microsoft_purview:Data Catalog \u2014 Data Lineage", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_purview", "target": "clause:microsoft_purview:Data Estate Insights", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_purview", "target": "clause:microsoft_purview:Data Health Management", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_purview", "target": "clause:microsoft_purview:Data lineage (lineage extraction)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_purview", "target": "clause:microsoft_purview:Data Map", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_purview", "target": "clause:microsoft_purview:Data Quality (data type and format rules)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_purview", "target": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_purview", "target": "clause:microsoft_purview:Microsoft 365 Advanced Data Residency", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_purview", "target": "clause:microsoft_purview:Microsoft platform encryption in transit (TLS)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_purview", "target": "clause:microsoft_purview:Microsoft Purview \u2014 Sensitive Information Types and DLP", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_purview", "target": "clause:microsoft_purview:Purview Audit (unified audit log)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_purview", "target": "clause:microsoft_purview:Purview Compliance Manager", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_purview", "target": "clause:microsoft_purview:Purview Insider Risk Management", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:A1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:A2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:A3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:A5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure AI certifications \u2014 ISO 27001, SOC 2, ISO 42001", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure AI compliance certifications \u2014 ISO 27001, SOC 2, ISO 4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure AI Foundry Observability \u2014 Operating Intent Drift Moni", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure DevOps Required Reviewers \u2014 Multi-Party AI Deployment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure encryption \u2014 at rest and in transit", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure Event Grid \u2014 AI Governance Policy Change Alerts", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure Machine Learning \u2014 Model and Data Version Tracking", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure Machine Learning Model Monitoring \u2014 Knowledge Source S", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure PIM Emergency Access \u2014 Governed Break-Glass Activation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Model Deployment Restriction and Content S", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Resource Provisioning Commitment Approval", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure Policy + Microsoft Purview Data Governance \u2014 Automated", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure Policy Compliance Dashboard \u2014 AI Workload Policy Adher", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure Policy Custom Definitions \u2014 AI Action Approval Thresho", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure Policy Initiative Assignments \u2014 AI Policy Register Imp", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure RBAC \u2014 Authority Delegation Hierarchy", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure Resource Manager Policy Versioning \u2014 Automated Policy", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Azure SLA + Azure Monitor \u2014 SLA Commitment Monitoring", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:F1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:F2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:F3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:I1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft data transfer documentation \u2014 customer TIA support", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Defender for Cloud \u2014 AI Workload Posture and Threa", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Defender for Cloud + Purview \u2014 Cross-Domain Policy", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft EU Data Boundary and Jurisdiction-Specific DPAs", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft EU Data Boundary Commitment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Privacy Report \u2014 periodic privacy governance discl", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Product Terms and Data Processing Agreement", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Products and Services DPA \u2014 security incident noti", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview \u2014 Data Governance for AI Knowledge Sources", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview + Azure Policy Compliance Reports \u2014 AI Gov", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Contract Obligation Audit Trail Re", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Principal Accountability for AI Ac", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Unified AI Authorization Audit Tra", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 compliance score and", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 control evidence coll", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Custom Assessments fo", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence archive", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence collection a", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 regulatory assessment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Regulatory Template C", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Structured Internal A", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Compliance Solutions \u2014 Contractual Conflic", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Data Lifecycle Management", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Data Loss Prevention \u2014 generative AI app c", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Data Map", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Data Map \u2014 lineage tracking", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction data governan", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Information Protection \u2014 classification an", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Information Protection Classification", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Purview Insider Risk Management \u2014 risky data-handl", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft RAI Red Team Operations \u2014 Independent Program Asse", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft RAI Transparency Report \u2014 Board Governance Disclos", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Responsible AI Impact Assessment template and guid", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 accountability and on", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Impact Assessment req", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Transparency goals", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report \u2014 Systematic Le", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report + Purview \u2014 Dis", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:Microsoft Sentinel \u2014 AI Policy Incident Classification and S", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:PS1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:PS2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:RS1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:RS2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:RS3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:T1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:T2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:microsoft_rai", "target": "clause:microsoft_rai:T3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0004", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0005", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0012", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0013", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0014", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0015", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0018", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0020", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0024", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0026", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0027", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0028", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0029", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0030", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0031", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0032", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.M0033", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0010", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0012", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0018", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0024", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0025", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0034.002", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0040", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0051", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0053", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0056", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0057", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0066", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0070", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0080", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0081", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0086", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0098", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0099", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0100", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0101", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0104", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:AML.T0105", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:mitre_atlas", "target": "clause:mitre_atlas:ATLAS tactics and techniques (framework-wide)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ms_ifc_agents", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ms_ifc_agents", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ms_ifc_agents", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ms_ifc_agents", "target": "clause:ms_ifc_agents:Confidentiality label read-access list ({Alice, Bob, Charlie", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ms_ifc_agents", "target": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ms_ifc_agents", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ms_ifc_agents", "target": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ms_ifc_agents", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ms_ifc_agents", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ms_ifc_agents", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ms_ifc_agents", "target": "clause:ms_ifc_agents:Propagate labels \u2014 labels travel with derivative results as", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ncsc_cisa_secure_ai_2023", "target": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nis2", "target": "clause:nis2:21", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_160_v2", "target": "clause:nist_800_160_v2:\u00a72.1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_160_v2", "target": "clause:nist_800_160_v2:\u00a72.1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_160_v2", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_160_v2", "target": "clause:nist_800_160_v2:\u00a72.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_160_v2", "target": "clause:nist_800_160_v2:\u00a73.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_160_v2", "target": "clause:nist_800_160_v2:Appendix D", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:AC-23", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:AC-5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:AU-11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:AU-12", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:AU-6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:CA-2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:CA-7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:CM-3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:IR-4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:PL-1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:RA-5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:SA-4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:SA-9", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:SI-2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_53", "target": "clause:nist_800_53:SI-7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_63", "target": "clause:nist_800_63:SP 800-63-4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_63", "target": "clause:nist_800_63:SP 800-63-4 \u00a73", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_63", "target": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_63", "target": "clause:nist_800_63:SP 800-63-4 \u00a73.4.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_63", "target": "clause:nist_800_63:SP 800-63A-4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_63", "target": "clause:nist_800_63:SP 800-63B-4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_63", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_63", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73.1.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_63", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_63", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_63", "target": "clause:nist_800_63:SP 800-63C-4 \u00a73.15", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_800_63", "target": "clause:nist_800_63:SP 800-63C-4 \u00a73.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_100_2", "target": "clause:nist_ai_100_2:NISTAML.012", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_100_2", "target": "clause:nist_ai_100_2:NISTAML.013", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_100_2", "target": "clause:nist_ai_100_2:NISTAML.021", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_100_2", "target": "clause:nist_ai_100_2:NISTAML.022", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_100_2", "target": "clause:nist_ai_100_2:NISTAML.023", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_100_2", "target": "clause:nist_ai_100_2:NISTAML.032", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_100_2", "target": "clause:nist_ai_100_2:NISTAML.037", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_100_2", "target": "clause:nist_ai_100_2:NISTAML.038", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_100_2", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_600_1", "target": "clause:nist_ai_600_1:2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_600_1", "target": "clause:nist_ai_600_1:2.8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_600_1", "target": "clause:nist_ai_600_1:2.9", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_600_1", "target": "clause:nist_ai_600_1:CBRN", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_600_1", "target": "clause:nist_ai_600_1:CONFABULATION", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_600_1", "target": "clause:nist_ai_600_1:DATA-PRIVACY", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_600_1", "target": "clause:nist_ai_600_1:HUMAN-AI-CONFIG", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_600_1", "target": "clause:nist_ai_600_1:INFO-INTEGRITY", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_600_1", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_ai_600_1", "target": "clause:nist_ai_600_1:MS-2.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:DE.CM-01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:DE.CM-09", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:GV.OC-01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:GV.OC-03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:GV.OC-04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:GV.OV-01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:GV.OV-03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:GV.PO", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:GV.PO-01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:GV.RR", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:GV.RR-02", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:GV.SC-07", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:ID.AM-01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:ID.AM-05", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:ID.IM-02", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:ID.IM-03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:ID.IM-04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:ID.RA-01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:ID.RA-06", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:PR.DS-01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:PR.IR-04", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:RC.RP", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:RC.RP-01", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:RC.RP-02", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:RC.RP-03", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:RC.RP-05", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:RS.AN", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:RS.CO", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_csf", "target": "clause:nist_csf:RS.MI", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:CT.DM-P4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:CT.DM-P6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:CT.DM-P7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:CT.DM-P8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:CT.DP-P1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:CT.DP-P2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:CT.DP-P3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:CT.PO-P1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:CT.PO-P2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:GV.MT-P1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:GV.MT-P3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:GV.PO-P1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:GV.PO-P2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:GV.PO-P5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:ID.DE-P3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:ID.DE-P5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:ID.IM-P1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:ID.IM-P5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:ID.IM-P6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:ID.IM-P8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:PR.AC-P4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:PR.AC-P6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:PR.DS-P1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:PR.DS-P2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:PR.DS-P5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_pf", "target": "clause:nist_pf:PR.DS-P6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:\u00a73.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:\u00a73.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:AI RMF: Govern", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:AI RMF: Govern, Map", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:AI RMF: Govern, Measure", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:AI RMF: Manage", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:AI RMF: Map", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:AI RMF: Measure", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 1.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 1.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 1.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 1.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 4.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 4.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN 6.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN-1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN-1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN-1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN-1.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN-1.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN-2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN-2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN-3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN-4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN-4.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:GOVERN-6.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MANAGE 1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MANAGE 1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MANAGE 2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MANAGE 3.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MANAGE 4.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MANAGE 4.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MANAGE-1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MANAGE-2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MANAGE-4.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MAP 1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MAP 1.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MAP 1.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MAP 2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MAP 2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MAP 5.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MAP-1.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MAP-2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MAP-2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MAP-4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE 1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE 2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE 2.11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE 2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE 2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE 2.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE 2.9", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE 3.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE 4.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE-2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE-2.10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE-2.11", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE-2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE-2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE-2.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_rmf", "target": "clause:nist_rmf:MEASURE-2.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_sp800_34", "target": "clause:nist_sp800_34:\u00a72.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_sp800_34", "target": "clause:nist_sp800_34:\u00a72.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_sp800_34", "target": "clause:nist_sp800_34:\u00a73.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_sp800_34", "target": "clause:nist_sp800_34:\u00a73.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_sp800_34", "target": "clause:nist_sp800_34:\u00a73.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_sp800_34", "target": "clause:nist_sp800_34:\u00a73.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_sp800_34", "target": "clause:nist_sp800_34:\u00a73.4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_sp800_34", "target": "clause:nist_sp800_34:\u00a73.4.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_sp800_34", "target": "clause:nist_sp800_34:\u00a73.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_sp800_34", "target": "clause:nist_sp800_34:\u00a73.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_sp800_34", "target": "clause:nist_sp800_34:\u00a74.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_sp800_34", "target": "clause:nist_sp800_34:\u00a74.2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_sp800_34", "target": "clause:nist_sp800_34:\u00a74.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_zt", "target": "clause:nist_zt:\u00a72.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_zt", "target": "clause:nist_zt:\u00a73.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_zt", "target": "clause:nist_zt:\u00a73.4.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_zt", "target": "clause:nist_zt:\u00a75.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_zt", "target": "clause:nist_zt:Tenet 1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_zt", "target": "clause:nist_zt:Tenet 3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_zt", "target": "clause:nist_zt:Tenet 4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_zt", "target": "clause:nist_zt:Tenet 5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_zt", "target": "clause:nist_zt:Tenet 6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nist_zt", "target": "clause:nist_zt:Tenet 7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:nyc_ll144", "target": "clause:nyc_ll144:\u00a720-871 (Bias audit requirements)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oauth_bcp", "target": "clause:oauth_bcp:\u00a72.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oauth_bcp", "target": "clause:oauth_bcp:\u00a72.1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:occ_ai", "target": "clause:occ_ai:Model Risk Management booklet (2021)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oecd_ai_principles", "target": "clause:oecd_ai_principles:Principle 1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oecd_ai_principles", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oecd_ai_principles", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oecd_ai_principles", "target": "clause:oecd_ai_principles:Principle 1.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oecd_ai_principles", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oecd_ai_principles", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oecd_ai_principles", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oecd_cg", "target": "clause:oecd_cg:II.F / IV.A \u2014 Related party transactions \u2014 approval and disc", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oecd_cg", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oecd_cg", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (oversight, acc", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oecd_cg", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:oidc_federation", "target": "clause:oidc_federation:\u00a79", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta Authorization Server \u2014 Commitment-Scoped Token Restrict", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta Authorization Server \u2014 OAuth 2.0 Delegation Constraints", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta Authorization Server \u2014 Signed Token Claims as Authoriza", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta Authorization Server \u2014 Time-Bounded Approval-Scoped Tok", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta Behavior Detection + System Log \u2014 Sign-In Anomaly Signa", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta Event Hooks \u2014 Authorization Policy Change Notifications", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta Fine-Grained Authorization \u2014 Knowledge Resource Access", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta for AI Agents \u2014 Scoped Token Authorization", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta Identity Tokens \u2014 Principal Identity Binding for AI Age", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta Privileged Access + Okta Workflows \u2014 Emergency Override", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta System Log \u2014 Authorization Policy Adherence Monitoring", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta System Log \u2014 Identity-Mediated Procurement Authorizatio", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Authorization Decision Reco", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Contract Authorization Evid", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta System Log + Identity Governance Reports \u2014 Authority Li", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta System Log Compliance Reports \u2014 Authorization Audit Evi", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta Workflows \u2014 Automated Escalation Gate Enforcement", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_authz", "target": "clause:okta_authz:Okta Workflows \u2014 Multi-Party Token Approval Chains", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_financial", "target": "clause:okta_financial:Okta access management", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_financial", "target": "clause:okta_financial:Okta Adaptive MFA", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_financial", "target": "clause:okta_financial:Okta Privileged Access", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_financial", "target": "clause:okta_financial:Okta System Log", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_governance", "target": "clause:okta_governance:Access certification", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_governance", "target": "clause:okta_governance:Access Certifications", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_governance", "target": "clause:okta_governance:Access Requests", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_governance", "target": "clause:okta_governance:Audit reporting", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_governance", "target": "clause:okta_governance:Entitlement Management", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_governance", "target": "clause:okta_governance:Workflows", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta \u2014 Concurrent Session Detection", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta \u2014 Multi Region Resilience", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta + DataGrail integration \u2014 automated DSR intake", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Access Certifications \u2014 Service Account Reviews", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Adaptive MFA \u2014 Impossible Travel Detection", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta API Access Management \u2014 OAuth scopes and consent", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Authorization Server \u2014 Scope Boundary Enforcement", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Cross App Access \u2014 Identity Assertion Authorization Gra", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Cross App Access \u2014 task-scoped resource tokens (RFC 869", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta for AI Agents \u2014 Agent Registry", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta for AI Agents \u2014 Assurance Levels", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta for AI Agents \u2014 Capability Manifest", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta for AI Agents \u2014 Minimum Privilege", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta for AI Agents \u2014 Owner Binding", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Identity Governance \u2014 Attestation Evidence", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Identity Governance \u2014 Governance Structure", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Identity Governance \u2014 Program Metrics", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta ISPM \u2014 Credential Exposure Scanning", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta ISPM \u2014 Unmanaged Agent Discovery", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 account deactivation and deletio", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 account suspension states", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 automated deprovisioning workflo", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 Deprovisioning", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 Provisioning Gate", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta OAuth \u2014 DPoP token binding (RFC 9449)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta OAuth \u2014 Token Revocation Propagation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta OAuth \u2014 User Consent Framework", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta OIDC \u2014 Dynamic Client Registration", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Privileged Access \u2014 Break Glass", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Privileged Access \u2014 Zero Standing Privilege", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta real-time directory synchronization \u2014 consent state pro", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta scoped administrator roles \u2014 least-privilege data expor", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta System Log \u2014 real-time audit events", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta System Log \u2014 Token Exchange Audit", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Anomalous Auth Detection", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Machine Identity Baseline", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta trust page (trust.okta.com) \u2014 third-party audit certifi", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Universal Directory \u2014 custom profile attributes for con", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Universal Directory \u2014 Federation Trust Config", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Universal Directory \u2014 Human NHI Separation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Universal Directory \u2014 profile export APIs", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Universal Directory and authentication policies \u2014 ident", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Workflows \u2014 event-driven lifecycle automation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:okta_iam", "target": "clause:okta_iam:Okta Workflows \u2014 Identity Incident Response", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:omb_a_123", "target": "clause:omb_a_123:Section II.A", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:omb_a_123", "target": "clause:omb_a_123:Section II.B", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:omb_a_123", "target": "clause:omb_a_123:Section III.A", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:omb_a_123", "target": "clause:omb_a_123:Section IV.A", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:omb_a_123", "target": "clause:omb_a_123:Section VI", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:omb_a_123", "target": "clause:omb_a_123:Section VI.A", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:opa_rego", "target": "clause:opa_rego:OPA Policy Language documentation (Rego)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_enterprise", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_enterprise", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_enterprise", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_enterprise", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_enterprise", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_model_spec", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_model_spec", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_model_spec", "target": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_model_spec", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_model_spec", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_model_spec", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_model_spec", "target": "clause:openai_model_spec:Stay in bounds (prohibited sexual content involving minors);", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_model_spec", "target": "clause:openai_model_spec:Stay in bounds; Seek the truth together; Do the best work", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_model_spec", "target": "clause:openai_model_spec:The chain of command", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_model_spec", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_policies", "target": "clause:openai_policies:Data Processing Addendum", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_policies", "target": "clause:openai_policies:Data residency commitments", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_policies", "target": "clause:openai_policies:Enterprise DPA", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_policies", "target": "clause:openai_policies:Trust Portal", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_policies", "target": "clause:openai_policies:Usage Policies", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard decisions affecting deployed mod", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven availability changes", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment changes", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Capabilities and Safeguards Repor", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 leadership risk ownership", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Safety Advisory Group", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Building trust (\u00a75) \u2014 framework iteration and transparency", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a75.1 Internal governanc", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical capability levels", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical levels", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Internal governance (\u00a75.1)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Internal governance (\u00a75.1) \u2014 Safety Advisory Group", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) and Internal governance (\u00a75.1)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:OpenAI Usage Policies \u2014 Permitted Use and Representation Gov", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Disclosure and G", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Documented Evalu", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Ongoing Evaluati", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Research Categories (Long-Range", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Reporting", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review and", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 System Cards and Safeguards Repo", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Tracked Categories and Deploymen", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy and Autonom", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Sandbagging and Long-range Auto", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74) and Internal governance (\u00a75.1)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_preparedness", "target": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI API \u2014 customer data export", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI API data controls \u2014 retention and training configurat", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI API data retention policy \u2014 30-day default", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI API log retention \u2014 30-day abuse monitoring window", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI API usage monitoring \u2014 data control configuration aud", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI certifications \u2014 SOC 2, ISO 27001, ISO 42001", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI compliance certifications \u2014 SOC 2, ISO 27001, ISO 420", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI data deletion controls", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 customer content and train", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional offerings", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional storage options", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI DPA and security documentation \u2014 customer transfer as", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI enterprise data controls \u2014 business data not used for", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI Enterprise Privacy \u2014 customer responsibility for lawf", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI privacy request channels (privacy.openai.com / dsar@o", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI privacy request fulfillment \u2014 personal data access", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI privacy request processing \u2014 data deletion", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI privacy request records", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI security practices \u2014 AES-256 at rest, TLS 1.2+ in tra", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI system cards \u2014 model behavior transparency", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI trust and compliance documentation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_privacy", "target": "clause:openai_privacy:OpenAI usage policies \u2014 restricted inference uses", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_sf", "target": "clause:openai_sf:OpenAI Enterprise Compliance API \u2014 audit and auth log export", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_sf", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 'Building trust' public disclosu", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_sf", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 safeguards for High-capability d", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openai_transparency", "target": "clause:openai_transparency:System Card \u2014 Knowledge Limitations", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openid", "target": "clause:openid:OpenID Connect Core 1.0 \u00a73.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openid", "target": "clause:openid:RFC 9396", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openid", "target": "clause:openid:RFC 9396 \u00a72", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openid", "target": "clause:openid:RFC 9396 \u00a76", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openid", "target": "clause:openid:RFC 9449", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openlineage", "target": "clause:openlineage:Run events (OpenLineage OpenAPI spec)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:openlineage", "target": "clause:openlineage:RunEvent object (OpenLineage.json JSON Schema)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:aiprogram", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:aitransparency", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:alloweddata", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:anomalousinputhandling", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:confcompute", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:dataminimize", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:discrete", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:evasioninputhandling", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:explainability", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:limitresources", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:modelalignment", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:modelobfuscation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:monitoruse", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:oversight", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:ratelimit", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:runtimemodeliointegrity", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:seceducate", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:secprogram", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:segregatedata", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:shortretain", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ai_exchange", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C1.1.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C10.1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C10.1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C10.1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C10.2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C10.2.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C10.3.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C10.3.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C10.4.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C10.4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C10.4.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C10.4.8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C11.1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C11.1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C11.1.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C11.2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C11.2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C11.2.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C12.1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C12.1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C12.1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C12.2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C12.2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C12.2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C12.2.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C12.2.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C12.4.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C12.4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C12.5.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C2.1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C2.1.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C2.1.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C2.1.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C2.2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C2.2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C2.2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C3.1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C3.1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C3.2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C3.3.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C3.3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C4.1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C4.2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C4.2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C4.2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C4.2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C4.2.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C4.3.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C5.1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C5.2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C5.2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C5.2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C5.2.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C6.1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C6.1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C6.1.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C6.2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C6.2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C6.2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C7.1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C7.3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C7.3.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C7.3.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C7.4.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C7.4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C7.4.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C8.2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C8.2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C8.2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C8.3.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C8.3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.2.10", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.2.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.2.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.2.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.2.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.2.8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.3.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.3.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.3.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.3.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.3.7", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.3.8", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.4.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.4.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.4.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.5.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.5.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.5.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.5.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.5.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.5.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aisvs", "target": "clause:owasp_aisvs:C9.6.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_aivss", "target": "clause:owasp_aivss:AIVSS-AARS", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_llm10", "target": "clause:owasp_llm10:LLM01:2025", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_llm10", "target": "clause:owasp_llm10:LLM02:2025", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_llm10", "target": "clause:owasp_llm10:LLM03:2025", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_llm10", "target": "clause:owasp_llm10:LLM04:2025", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_llm10", "target": "clause:owasp_llm10:LLM05:2025", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_llm10", "target": "clause:owasp_llm10:LLM06:2025", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_llm10", "target": "clause:owasp_llm10:LLM07:2025", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_llm10", "target": "clause:owasp_llm10:LLM08:2025", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_llm10", "target": "clause:owasp_llm10:LLM10:2025", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ml_top10", "target": "clause:owasp_ml_top10:ML02:2023", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ml_top10", "target": "clause:owasp_ml_top10:ML03:2023", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ml_top10", "target": "clause:owasp_ml_top10:ML06:2023", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:owasp_ml_top10", "target": "clause:owasp_ml_top10:ML10:2023", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:pcaob_as_2201", "target": "clause:pcaob_as_2201:\u00b6.14-.18", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:pcaob_as_2201", "target": "clause:pcaob_as_2201:\u00b6.20", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:pcaob_as_2201", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:pcaob_as_2201", "target": "clause:pcaob_as_2201:\u00b6.39", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:pcaob_as_2201", "target": "clause:pcaob_as_2201:\u00b6.39-.40", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:pcaob_as_2201", "target": "clause:pcaob_as_2201:\u00b6.39-.42", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:pcaob_as_2201", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:pcaob_as_2201", "target": "clause:pcaob_as_2201:\u00b6.62-.70", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:pcaob_as_2201", "target": "clause:pcaob_as_2201:\u00b6.68-.76", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:pcaob_as_2201", "target": "clause:pcaob_as_2201:\u00b6.72-.76", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:Ping Identity \u2014 Cross Organization Agent Auth", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:Ping Identity \u2014 Federated Cross Org Authorization", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:Ping Identity compliance certifications (SOC 2 Type II, ISO", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent Gateway revocation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core delegation chain", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core provisioning gate", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:Ping Identity for AI \u2014 Governance Capabilities", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Delegation Depth Limit", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Trust Framework", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:PingFederate \u2014 OIDC Audience Validation", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:PingFederate \u2014 Scope Reduction Enforcement", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:PingOne Credentials \u2014 eIDAS 2.0-aligned verifiable credentia", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:PingOne Credentials \u2014 Verifiable Credentials", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:ping_identity", "target": "clause:ping_identity:PingOne Credentials \u2014 W3C Verifiable Credentials / DID", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:pipl", "target": "clause:pipl:55", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:plot4ai", "target": "clause:plot4ai:safety-and-environmental-impact", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:plot4ai", "target": "clause:plot4ai:transparency-and-accessibility", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:quebec_law25", "target": "clause:quebec_law25:3.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:salesforce_trust", "target": "clause:salesforce_trust:Audit trail", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:salesforce_trust", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:salesforce_trust", "target": "clause:salesforce_trust:Data masking", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:salesforce_trust", "target": "clause:salesforce_trust:Prompt defense", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:salesforce_trust", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:salesforce_trust", "target": "clause:salesforce_trust:Secure data retrieval, dynamic grounding, and toxicity detec", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:salesforce_trust", "target": "clause:salesforce_trust:Toxicity detection \u2014 output scoring", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:scim", "target": "clause:scim:RFC 7643 \u00a74.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:scim", "target": "clause:scim:RFC 7644 \u00a73.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:scim", "target": "clause:scim:RFC 7644 \u00a73.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:scim", "target": "clause:scim:RFC 7644 \u00a73.4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:scim", "target": "clause:scim:RFC7644 \u00a73.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:scim", "target": "clause:scim:RFC7644 \u00a73.6", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sec_ai", "target": "clause:sec_ai:Proposed rule, Release 34-97990 (withdrawn 2025-06-12)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:snowflake_horizon", "target": "clause:snowflake_horizon:Access History", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:snowflake_horizon", "target": "clause:snowflake_horizon:Access History (object dependency lineage)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:snowflake_horizon", "target": "clause:snowflake_horizon:Data Quality \u2014 Quality Metric Functions", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:snowflake_horizon", "target": "clause:snowflake_horizon:Data Quality Monitoring (data metric functions)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:snowflake_horizon", "target": "clause:snowflake_horizon:Object tagging", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:snowflake_horizon", "target": "clause:snowflake_horizon:Snowflake Data Metric Functions \u2014 History", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:A1.1 \u2014 Capacity management and monitoring", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:A1.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC1.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC1.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC1.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC2.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC2.2 & CC4.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC2.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC2.3 \u2014 Communicates with external parties", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC2.3 / CC7.4 \u2014 External communication and incident response", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC3.1 \u2014 COSO Principle 6 \u2014 Specifies suitable objectives", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC4.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC4.1 \u2014 COSO Principle 16 \u2014 ongoing and/or separate evaluati", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC4.1 and CC4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC4.1, CC4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC4.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC5.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC6.1, CC7.1, CC9.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC6.1, CC7.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC6.6, CC6.7, CC7.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC7.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC7.2 \u2014 Detection and Monitoring", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC7.2 \u2014 Monitoring of system components", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC7.2 \u2014 The entity monitors system components for anomalies", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC7.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC7.4, CC7.5", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:CC9.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:P1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:soc2", "target": "clause:soc2:PI1.1", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sox", "target": "clause:sox:\u00a7301", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sox", "target": "clause:sox:\u00a7302", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sox", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sox", "target": "clause:sox:\u00a7302, \u00a7404", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sox", "target": "clause:sox:\u00a7302(a)(4)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sox", "target": "clause:sox:\u00a7302(a)(5)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sox", "target": "clause:sox:\u00a7404", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sox", "target": "clause:sox:\u00a7404(a)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sox", "target": "clause:sox:\u00a7404(b)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sox", "target": "clause:sox:Section 302", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sox", "target": "clause:sox:Section 302 & 404", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sox", "target": "clause:sox:Section 404", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:spiffe_spire", "target": "clause:spiffe_spire:SVID \u00a72", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sr26_2", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sr26_2", "target": "clause:sr26_2:\u00a7IV", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sr26_2", "target": "clause:sr26_2:\u00a7V", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sr26_2", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sr26_2", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sr26_2", "target": "clause:sr26_2:\u00a7V (Outcomes Analysis)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sr26_2", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sr26_2", "target": "clause:sr26_2:\u00a7V + \u00a7VI", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sr26_2", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sr26_2", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sr26_2", "target": "clause:sr26_2:\u00a7VI (Model Inventory)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sr26_2", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:sr26_2", "target": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:uk_duaa", "target": "clause:uk_duaa:access rights provisions", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:uk_duaa", "target": "clause:uk_duaa:automated decision rights", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:uk_duaa", "target": "clause:uk_duaa:children provisions", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:uk_duaa", "target": "clause:uk_duaa:Data protection complaints procedure", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:uk_duaa", "target": "clause:uk_duaa:international transfer provisions", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:uk_duaa", "target": "clause:uk_duaa:TIA equivalent", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:un_ethics_ai", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:un_ethics_ai", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:un_ethics_ai", "target": "clause:un_ethics_ai:\u00b635\u2013\u00b636 (Human oversight and determination)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:un_ethics_ai", "target": "clause:un_ethics_ai:\u00b637 (Transparency)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:un_ethics_ai", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:un_ethics_ai", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:w3c_did", "target": "clause:w3c_did:\u00a74", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:w3c_did", "target": "clause:w3c_did:\u00a75", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:w3c_did", "target": "clause:w3c_did:\u00a75.3", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:w3c_prov", "target": "clause:w3c_prov:\u00a72", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:w3c_prov", "target": "clause:w3c_prov:\u00a75", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:w3c_prov", "target": "clause:w3c_prov:\u00a75.1.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:w3c_prov", "target": "clause:w3c_prov:\u00a75.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:w3c_prov", "target": "clause:w3c_prov:\u00a75.2.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:w3c_prov", "target": "clause:w3c_prov:\u00a75.3.2", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "source:w3c_prov", "target": "clause:w3c_prov:\u00a75.4", "type": "defines", "provenance": { "source": "corpus" }, "confidence": null }, { "source": "control:security/EC-01", "target": "AML.CS0050", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "high" }, { "source": "control:security/EC-02", "target": "AML.CS0059", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "medium" }, { "source": "control:security/EC-02", "target": "AML.CS0061", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "high" }, { "source": "control:security/EC-07", "target": "AML.CS0059", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "medium" }, { "source": "control:security/EC-08", "target": "AML.CS0048", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "medium" }, { "source": "control:security/EC-09", "target": "AML.CS0050", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "high" }, { "source": "control:security/EC-09", "target": "AML.CS0051", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "medium" }, { "source": "control:security/IA-04", "target": "AML.CS0048", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "high" }, { "source": "control:security/PT-02", "target": "AML.CS0048", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "medium" }, { "source": "control:security/PT-02", "target": "AML.CS0049", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "medium" }, { "source": "control:security/PT-03", "target": "AML.CS0049", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "high" }, { "source": "control:security/PT-07", "target": "AML.CS0049", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "high" }, { "source": "control:security/PT-08", "target": "AML.CS0059", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "high" }, { "source": "control:security/RT-01", "target": "AML.CS0061", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "medium" }, { "source": "control:security/RT-02", "target": "AML.CS0051", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "high" }, { "source": "control:security/RT-02", "target": "AML.CS0059", "type": "evidenced_by", "provenance": { "source": "mitre_atlas", "basis": "apeiris-evidence-reference" }, "confidence": "high" }, { "source": "control:authority/PA-01", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-01", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-01", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-01", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-02", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-02", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-02", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-02", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-03", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-03", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-03", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-03", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-04", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-04", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-04", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-04", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-05", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-05", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-05", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-05", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-06", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-06", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-06", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-06", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-07", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-07", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-07", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-07", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-08", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-08", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-08", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-08", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-09", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-09", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-09", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-09", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PA-09", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-01", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-01", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-01", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-01", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-02", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-02", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-02", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-02", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-03", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-03", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-03", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-03", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-04", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-04", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-04", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-04", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-05", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-05", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-05", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-05", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-06", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-06", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-06", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-06", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-07", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-07", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-07", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-07", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-08", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-08", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-08", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PE-08", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-01", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-01", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-01", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-01", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-02", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-02", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-02", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-02", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-03", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-03", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-03", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-03", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-04", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-04", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-04", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-04", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-05", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-05", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-05", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-05", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-06", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-06", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-06", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-06", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-07", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-07", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-07", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-07", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-08", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-08", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-08", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-08", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-09", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-09", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-09", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-09", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PG-09", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-01", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-01", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-01", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-01", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-02", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-02", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-02", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-02", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-03", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-03", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-03", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-03", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-04", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-04", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-04", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-04", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-05", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-05", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-05", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-05", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-06", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-06", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-06", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-06", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-07", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-07", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-07", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-07", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-08", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-08", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-08", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-08", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-09", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-09", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-09", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-09", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PO-09", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-01", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-01", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-01", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-01", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-02", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-02", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-02", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-02", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-03", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-03", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-03", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-03", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-04", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-04", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-04", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-04", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-05", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-05", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-05", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-05", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-06", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-06", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-06", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-06", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-07", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-07", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-07", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-07", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-08", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-08", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-08", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-08", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-09", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-09", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-09", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-09", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PR-09", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-01", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-01", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-01", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-01", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-02", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-02", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-02", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-02", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-03", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-03", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-03", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-03", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-04", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-04", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-04", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-04", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-05", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-05", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-05", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-05", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-06", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-06", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-06", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-06", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-07", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-07", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-07", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-07", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-08", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-08", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-08", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-08", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-09", "target": "lens:board_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-09", "target": "lens:cfo_procurement", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-09", "target": "lens:general_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-09", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:authority/PV-09", "target": "lens:risk_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:ethics/EG-09", "target": "lens:business_stakeholder", "type": "has_lens", "provenance": { "source": "corpus", "note": "Understand and own the environmental cost and proportionality of deploying the m" }, "confidence": null }, { "source": "control:ethics/EG-09", "target": "lens:data_scientist", "type": "has_lens", "provenance": { "source": "corpus", "note": "Measure training/inference energy and evaluate lower-footprint model or serving " }, "confidence": null }, { "source": "control:ethics/EG-09", "target": "lens:ethics_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "Own the proportionality judgment and the efficiency threshold for high-footprint" }, "confidence": null }, { "source": "control:ethics/EG-09", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evidence that each model carries a compute-impact disclosure and proportionality" }, "confidence": null }, { "source": "control:ethics/EG-09", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "Map the disclosure to EU AI Act sustainability provisions and any reporting obli" }, "confidence": null }, { "source": "control:ethics/XP-09", "target": "lens:business_stakeholder", "type": "has_lens", "provenance": { "source": "corpus", "note": "Own accessibility as a product requirement for user-facing AI." }, "confidence": null }, { "source": "control:ethics/XP-09", "target": "lens:data_scientist", "type": "has_lens", "provenance": { "source": "corpus", "note": "Ensure explanation outputs render accessibly across tiers." }, "confidence": null }, { "source": "control:ethics/XP-09", "target": "lens:ethics_officer", "type": "has_lens", "provenance": { "source": "corpus", "note": "Own inclusion of people with disabilities in the AI decision/notice flow." }, "confidence": null }, { "source": "control:ethics/XP-09", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evidence of accessibility conformance testing + remediation per interface." }, "confidence": null }, { "source": "control:ethics/XP-09", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "Map to ADA/accessibility obligations and disclosure requirements." }, "confidence": null }, { "source": "control:identity/DE-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-01", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-01", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-01", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-01", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-02", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-02", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-02", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-02", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-03", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-03", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-03", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-03", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-04", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-04", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-04", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-04", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-05", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-05", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-05", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-05", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-06", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-06", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-06", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-06", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-07", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-07", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-07", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-07", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-08", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-08", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-08", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-08", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-09", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-09", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-09", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-09", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/DE-09", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-01", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-01", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-01", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-01", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-02", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-02", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-02", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-02", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-03", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-03", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-03", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-03", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-04", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-04", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-04", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-04", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-05", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-05", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-05", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-05", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-06", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-06", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-06", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-06", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-07", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-07", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-07", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-07", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-08", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-08", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-08", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IC-08", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-01", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-01", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-01", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-01", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-02", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-02", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-02", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-02", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-03", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-03", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-03", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-03", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-04", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-04", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-04", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-04", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-05", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-05", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-05", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-05", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-06", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-06", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-06", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-06", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-07", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-07", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-07", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-07", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-08", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-08", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-08", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-08", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-09", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-09", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-09", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-09", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IF-09", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-01", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-01", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-01", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-01", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-02", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-02", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-02", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-02", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-03", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-03", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-03", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-03", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-04", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-04", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-04", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-04", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-05", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-05", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-05", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-05", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-06", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-06", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-06", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-06", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-07", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-07", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-07", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-07", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-08", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-08", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-08", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/II-08", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-01", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-01", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-01", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-01", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-02", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-02", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-02", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-02", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-03", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-03", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-03", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-03", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-04", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-04", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-04", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-04", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-05", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-05", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-05", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-05", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-06", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-06", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-06", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-06", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-07", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-07", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-07", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-07", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-08", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-08", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-08", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-08", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-09", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-09", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-09", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-09", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/IM-09", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-01", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-01", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-01", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-01", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-02", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-02", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-02", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-02", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-03", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-03", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-03", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-03", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-04", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-04", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-04", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-04", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-05", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-05", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-05", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-05", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-06", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-06", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-06", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-06", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-07", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-07", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-07", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-07", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-08", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-08", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-08", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-08", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-09", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-09", "target": "lens:iam_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-09", "target": "lens:it_operations", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-09", "target": "lens:legal_counsel", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:identity/NI-09", "target": "lens:security_architect", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/BH-01", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement as a sidecar or streaming pipeline consuming inference telemetry; use " }, "confidence": null }, { "source": "control:model/BH-01", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "SPC control limits must be re-derived after each model update; the post-deployme" }, "confidence": null }, { "source": "control:model/BH-01", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "EU AI Act Art. 72 requires post-market monitoring for high-risk AI; the SPC aler" }, "confidence": null }, { "source": "control:model/BH-01", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Integrate PSI computation as a non-blocking async task; auto-trigger model revie" }, "confidence": null }, { "source": "control:model/BH-01", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe whether slow-drip adversarial inputs evade single-window SPC; test EWMA se" }, "confidence": null }, { "source": "control:model/BH-02", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Serialize DriftReference as a lightweight JSON artifact at training time; implem" }, "confidence": null }, { "source": "control:model/BH-02", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Post-deployment evaluation establishes the initial drift baseline; include drift" }, "confidence": null }, { "source": "control:model/BH-02", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "SR 26-2 mandates ongoing monitoring for $30B+ asset institutions; drift event lo" }, "confidence": null }, { "source": "control:model/BH-02", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Drift alerts auto-create issue tickets; retraining triggers require human approv" }, "confidence": null }, { "source": "control:model/BH-02", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test whether gradual adversarial input manipulation below the per-window PSI thr" }, "confidence": null }, { "source": "control:model/BH-03", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "The metrics aggregation service must be independent of the inference serving pat" }, "confidence": null }, { "source": "control:model/BH-03", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "EvaluationBaseline artifact is the authoritative linkage between pre-release eva" }, "confidence": null }, { "source": "control:model/BH-03", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "SR 26-2 and EU AI Act Art. 72 both require evidence of ongoing performance monit" }, "confidence": null }, { "source": "control:model/BH-03", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Automate baseline re-anchoring as part of the deployment pipeline; require human" }, "confidence": null }, { "source": "control:model/BH-03", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test whether adversarial inputs can selectively degrade subgroup performance whi" }, "confidence": null }, { "source": "control:model/BH-04", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "BoundaryTestSuite runner authenticates to the production endpoint as a dedicated" }, "confidence": null }, { "source": "control:model/BH-04", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evaluation team curates and updates the BoundaryTestSuite; novel adversarial pro" }, "confidence": null }, { "source": "control:model/BH-04", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "EU AI Act Art. 9(1)(b) and Art. 15 require that high-risk AI achieve consistent " }, "confidence": null }, { "source": "control:model/BH-04", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "BoundaryTestSuite runs are a deployment gate; new model versions must not regres" }, "confidence": null }, { "source": "control:model/BH-04", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Primary threat model: AML.T0051 (LLM Prompt Injection). Red team provides novel " }, "confidence": null }, { "source": "control:model/BH-05", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Log emission must be async and non-blocking; inference latency must not increase" }, "confidence": null }, { "source": "control:model/BH-05", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "DecisionLogs feed the continuous evaluation pipeline \u2014 sampled outputs are score" }, "confidence": null }, { "source": "control:model/BH-05", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "EU AI Act Art. 12 and SR 26-2 both require structured logging; BH-05 is the prim" }, "confidence": null }, { "source": "control:model/BH-05", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "DecisionLog volume must be budgeted in infrastructure cost; log ingestion pipeli" }, "confidence": null }, { "source": "control:model/BH-05", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test whether the output sampling pattern can be inferred and exploited by an adv" }, "confidence": null }, { "source": "control:model/BH-06", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe runner uses a separate credential from production users; probe inputs must" }, "confidence": null }, { "source": "control:model/BH-06", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "InjectionResistanceScore is a first-class model health metric alongside accuracy" }, "confidence": null }, { "source": "control:model/BH-06", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "EU AI Act Art. 15 requires robustness against manipulation attempts; InjectionRe" }, "confidence": null }, { "source": "control:model/BH-06", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "InjectionProbeLibrary runs are a deployment gate; new model versions must not re" }, "confidence": null }, { "source": "control:model/BH-06", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Primary threat model: AML.T0051 (LLM Prompt Injection) and OWASP LLM01:2025. Red" }, "confidence": null }, { "source": "control:model/BH-07", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "CostEvent emission must be non-blocking; cost estimation uses token-count-based " }, "confidence": null }, { "source": "control:model/BH-07", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evaluation runs (BoundaryTestSuite, InjectionProbeLibrary) must use a dedicated " }, "confidence": null }, { "source": "control:model/BH-07", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Cost monitoring provides financial controls evidence for governance reporting; b" }, "confidence": null }, { "source": "control:model/BH-07", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Monthly cost reports generated per model and per caller; cost efficiency regress" }, "confidence": null }, { "source": "control:model/BH-07", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test whether a low-and-slow bulk inference attack (AML.T0044 / AML.T0024) evades" }, "confidence": null }, { "source": "control:model/BH-08", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement authorization gates as pipeline-as-code checks that block stage advanc" }, "confidence": null }, { "source": "control:model/BH-08", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Shadow comparison report and EvaluationBaseline artifact from EV layer are input" }, "confidence": null }, { "source": "control:model/BH-08", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "SR 26-2 requires model deployment be subject to independent validation and docum" }, "confidence": null }, { "source": "control:model/BH-08", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Canary rollout is orchestrated by MLOps; auto-rollback must be tested in staging" }, "confidence": null }, { "source": "control:model/BH-08", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe whether shadow scoring can be gamed by a model that behaves differently on" }, "confidence": null }, { "source": "control:model/BH-09", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "C2PA manifest embedding must be atomic with content generation \u2014 manifests added" }, "confidence": null }, { "source": "control:model/BH-09", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evaluate watermark robustness: test whether common post-processing (compression," }, "confidence": null }, { "source": "control:model/BH-09", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "EU AI Act Art. 50 is an active obligation for GPAI models; it applies from Augus" }, "confidence": null }, { "source": "control:model/BH-09", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "GenerationTraceabilityRegistry must be budgeted as separate storage and retentio" }, "confidence": null }, { "source": "control:model/BH-09", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test whether the C2PA manifest can be stripped, replayed from a different artifa" }, "confidence": null }, { "source": "control:model/BH-10", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "The online learning authorization gate must be enforced at the model serving inf" }, "confidence": null }, { "source": "control:model/BH-10", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evaluation team reviews RLAIF labeler quality at minimum monthly; novel RLAIF qu" }, "confidence": null }, { "source": "control:model/BH-10", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "SR 26-2 requires model updates driven by feedback loops be subject to the same m" }, "confidence": null }, { "source": "control:model/BH-10", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Feedback pipeline SLA must be monitored: feedback latency (time from inference t" }, "confidence": null }, { "source": "control:model/BH-10", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test whether coordinated feedback manipulation from a small labeler pool (sybil " }, "confidence": null }, { "source": "control:model/CR-01", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Instrument with OpenTelemetry; emit to time-series (Prometheus/ClickHouse); aler" }, "confidence": null }, { "source": "control:model/CR-01", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Review metric taxonomy at each evaluation cycle; recalibrate thresholds when bas" }, "confidence": null }, { "source": "control:model/CR-01", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Confirm risk dashboard covers all five metric types expected under SR 26-2 Sec. " }, "confidence": null }, { "source": "control:model/CR-01", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build monitoring as code: thresholds in version control, alert configs deployed " }, "confidence": null }, { "source": "control:model/CR-01", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Attempt to suppress monitoring signals via adversarial inputs; verify that evasi" }, "confidence": null }, { "source": "control:model/CR-02", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement append-only S3 bucket with Object Lock COMPLIANCE; integrate Rekor cli" }, "confidence": null }, { "source": "control:model/CR-02", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Every evaluation result \u2014 benchmark score, red-team report, bias audit \u2014 must ge" }, "confidence": null }, { "source": "control:model/CR-02", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evidence archive is the primary record for regulatory examinations under EU AI A" }, "confidence": null }, { "source": "control:model/CR-02", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build evidence emission into the CD pipeline: artifact creation, hash computatio" }, "confidence": null }, { "source": "control:model/CR-02", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Attempt to retrieve an un-anchored artifact or forge an artifact_hash; verify th" }, "confidence": null }, { "source": "control:model/CR-03", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement re-validation as an automated CI/CD pipeline stage triggered by schedu" }, "confidence": null }, { "source": "control:model/CR-03", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Re-validation must use the same benchmark datasets as pre-deployment evaluation " }, "confidence": null }, { "source": "control:model/CR-03", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Re-validation schedule aligns with SR 26-2 Sec. V ongoing-monitoring and periodi" }, "confidence": null }, { "source": "control:model/CR-03", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Re-validation pipeline should be idempotent and runnable on demand. Build result" }, "confidence": null }, { "source": "control:model/CR-03", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Verify that re-validation includes adversarial robustness and red-team evaluatio" }, "confidence": null }, { "source": "control:model/CR-04", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement model rollback as a one-command operation (LI-06 prerequisite). Build " }, "confidence": null }, { "source": "control:model/CR-04", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "After each P1/P2 incident, run targeted evaluation to understand the performance" }, "confidence": null }, { "source": "control:model/CR-04", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "AIRP must be reviewed and approved by legal, compliance, and AI risk functions a" }, "confidence": null }, { "source": "control:model/CR-04", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Incident response automation: auto-rollback on P1 CR-01 alert if auto_rollback_e" }, "confidence": null }, { "source": "control:model/CR-04", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Use MITRE ATLAS adversarial scenarios in tabletop exercises. Specifically test A" }, "confidence": null }, { "source": "control:model/CR-05", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build notification task automation as a webhook consumer of CR-04 incident sever" }, "confidence": null }, { "source": "control:model/CR-05", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "No evaluation-specific obligations, but post-incident evaluation findings (CR-03" }, "confidence": null }, { "source": "control:model/CR-05", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Regulatory notification matrix is a primary GRC governance artifact. Review quar" }, "confidence": null }, { "source": "control:model/CR-05", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "No MLOps-specific implementation. MLOps team is responsible for providing incide" }, "confidence": null }, { "source": "control:model/CR-05", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "No red-team-specific obligations." }, "confidence": null }, { "source": "control:model/CR-06", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build harm reporting endpoint that writes structured records directly to CR-02 a" }, "confidence": null }, { "source": "control:model/CR-06", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Literature monitoring findings should be assessed by the evaluation team for ben" }, "confidence": null }, { "source": "control:model/CR-06", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Post-market surveillance program is required by EU AI Act Art. 72 for high-risk " }, "confidence": null }, { "source": "control:model/CR-06", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "No MLOps-specific implementation beyond ensuring the harm reporting API endpoint" }, "confidence": null }, { "source": "control:model/CR-06", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "CVD submissions from external researchers are a primary red-team intelligence so" }, "confidence": null }, { "source": "control:model/CR-07", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Automate infrastructure decommissioning via IaC destroy scripts executed as a pi" }, "confidence": null }, { "source": "control:model/CR-07", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "At retirement, produce a final evaluation snapshot (re-run last benchmark suite)" }, "confidence": null }, { "source": "control:model/CR-07", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Retirement decision requires AI risk function sign-off. The final retirement rec" }, "confidence": null }, { "source": "control:model/CR-07", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Retire models via pipeline, not manually. Evidence archive verification step mus" }, "confidence": null }, { "source": "control:model/CR-07", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Attempt to reach retired model endpoints 30 days after decommission; verify all " }, "confidence": null }, { "source": "control:model/CR-08", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "The audit:cross-domain check is the primary implementation artifact. Maintain na" }, "confidence": null }, { "source": "control:model/CR-08", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "No evaluation-specific implementation. Cross-domain references to evaluation art" }, "confidence": null }, { "source": "control:model/CR-08", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Cross-domain assurance coordination is a governance obligation \u2014 no single domai" }, "confidence": null }, { "source": "control:model/CR-08", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Namespace-registry.json must be pinned by commit hash in CI to prevent silent re" }, "confidence": null }, { "source": "control:model/CR-08", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test cross-domain URI resolution in an adversarial manner: can a false reference" }, "confidence": null }, { "source": "control:model/EV-01", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement as a pipeline stage that consumes a signed evaluation manifest artifac" }, "confidence": null }, { "source": "control:model/EV-01", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Define and version-control the minimum evaluation suite for each risk tier; sign" }, "confidence": null }, { "source": "control:model/EV-01", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Map gate requirements to EU AI Act Art. 9, SR 26-2 \u00a7III.B; document the exceptio" }, "confidence": null }, { "source": "control:model/EV-01", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Integrate the gate as a first-class blocking stage in the MLOps platform; surfac" }, "confidence": null }, { "source": "control:model/EV-01", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Attempt to forge or replay a prior evaluation manifest for a new artifact; probe" }, "confidence": null }, { "source": "control:model/EV-02", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement evaluation as a structured, dimension-isolated pipeline stage; expose " }, "confidence": null }, { "source": "control:model/EV-02", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Own threshold definition, dataset curation, and environment specification; ensur" }, "confidence": null }, { "source": "control:model/EV-02", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Map dimension requirements to EU AI Act Art. 9(5)(6) and ISO 42005:2025 impact a" }, "confidence": null }, { "source": "control:model/EV-02", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Automate dimension-level evaluation as part of the model pipeline; surface dimen" }, "confidence": null }, { "source": "control:model/EV-02", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test whether a model that fails a safety dimension can be promoted by manipulati" }, "confidence": null }, { "source": "control:model/EV-03", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Integrate capability assessment as a mandatory gate for frontier-class models in" }, "confidence": null }, { "source": "control:model/EV-03", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Own elicitation methodology design and threshold calibration; recruit and manage" }, "confidence": null }, { "source": "control:model/EV-03", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Map assessment requirements to applicable RSP/Preparedness/FSF obligations; trac" }, "confidence": null }, { "source": "control:model/EV-03", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build scoping classifier into the model registry onboarding workflow; surface ca" }, "confidence": null }, { "source": "control:model/EV-03", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Design best-effort elicitation protocols; use scaffolding, fine-tuning, and mult" }, "confidence": null }, { "source": "control:model/EV-04", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Provide production-equivalent red-team environment; build tooling to capture and" }, "confidence": null }, { "source": "control:model/EV-04", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Design red-team scope and threat model; select adversarial datasets and scenario" }, "confidence": null }, { "source": "control:model/EV-04", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Map red-team requirements to EU AI Act Art. 55(1)(a) for systemic risk GPAI mode" }, "confidence": null }, { "source": "control:model/EV-04", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Surface red-team report status on model registry cards; block promotion pipeline" }, "confidence": null }, { "source": "control:model/EV-04", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Execute structured adversarial probing with genuine adversarial creativity; docu" }, "confidence": null }, { "source": "control:model/EV-05", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build disaggregated evaluation infrastructure that reports per-group metrics ind" }, "confidence": null }, { "source": "control:model/EV-05", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Own metric selection and rationale documentation; identify population group cove" }, "confidence": null }, { "source": "control:model/EV-05", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Map fairness evaluation to EU AI Act Art. 9(7) and Annex III; obtain legal revie" }, "confidence": null }, { "source": "control:model/EV-05", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Surface disaggregated fairness metrics on model registry cards; alert on fairnes" }, "confidence": null }, { "source": "control:model/EV-05", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe for demographic disparities not covered by the selected metrics; test edge" }, "confidence": null }, { "source": "control:model/EV-06", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Containerize evaluation environments to enable reproducibility; implement artifa" }, "confidence": null }, { "source": "control:model/EV-06", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Own benchmark selection criteria and contamination screening; define reproductio" }, "confidence": null }, { "source": "control:model/EV-06", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Track reproduction success rates as a governance KRI for evaluation integrity; i" }, "confidence": null }, { "source": "control:model/EV-06", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Integrate containerized evaluation environments into the MLOps platform; surface" }, "confidence": null }, { "source": "control:model/EV-06", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Attempt to reproduce evaluation results using only the design document; identify" }, "confidence": null }, { "source": "control:model/EV-07", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Automate regression suite execution as a blocking pipeline stage on all defined " }, "confidence": null }, { "source": "control:model/EV-07", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Define and maintain the regression suite; ensure safety scenario coverage is com" }, "confidence": null }, { "source": "control:model/EV-07", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Map regression testing requirements to SR 26-2 \u00a7III.C ongoing monitoring and EU " }, "confidence": null }, { "source": "control:model/EV-07", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Integrate regression evaluation into the model update pipeline with automatic tr" }, "confidence": null }, { "source": "control:model/EV-07", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test the regression suite for coverage gaps; attempt to introduce regressions th" }, "confidence": null }, { "source": "control:model/EV-08", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement pipeline-level enforcement that rejects evaluation manifests where val" }, "confidence": null }, { "source": "control:model/EV-08", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Operate as an independent function with genuine authority to block deployment; c" }, "confidence": null }, { "source": "control:model/EV-08", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Map independence requirements to SR 26-2 \u00a7III.B effective challenge for us-regul" }, "confidence": null }, { "source": "control:model/EV-08", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Enforce validator \u2260 developer identity check in the pipeline manifest validation" }, "confidence": null }, { "source": "control:model/EV-08", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe whether the independence boundary can be compromised through informal infl" }, "confidence": null }, { "source": "control:model/EV-09", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Integrate classification record as a mandatory model registry field; block advan" }, "confidence": null }, { "source": "control:model/EV-09", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Use the signed classification record to determine mandatory evaluation controls " }, "confidence": null }, { "source": "control:model/EV-09", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Own the classification policy and questionnaire; track classification distributi" }, "confidence": null }, { "source": "control:model/EV-09", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Surface classification record and applicable profiles on model registry cards; e" }, "confidence": null }, { "source": "control:model/EV-09", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe for classification loopholes: use cases that circumvent Annex III categori" }, "confidence": null }, { "source": "control:model/EV-10", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement content-addressing (SHA-256) as the standard provenance mechanism for " }, "confidence": null }, { "source": "control:model/EV-10", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Ensure evaluation result artifacts are complete (per-dimension results, not only" }, "confidence": null }, { "source": "control:model/EV-10", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Map record-keeping requirements to EU AI Act Art. 12 and SR 26-2 \u00a7III.B document" }, "confidence": null }, { "source": "control:model/EV-10", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Surface provenance chain verification status on model registry cards; alert on i" }, "confidence": null }, { "source": "control:model/EV-10", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Attempt to substitute a passing evaluation result for a failing one without dete" }, "confidence": null }, { "source": "control:model/EV-11", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Wire a backdoor/trojan scanner into the model-registration CI; fail registration" }, "confidence": null }, { "source": "control:model/EV-11", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Own the scan methodology and thresholds; validate scanner efficacy against known" }, "confidence": null }, { "source": "control:model/EV-11", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evidence that every registered model carries a signed clean-scan report; report " }, "confidence": null }, { "source": "control:model/EV-11", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Gate the registry and deployment pipeline on scan status; keep scan reports in t" }, "confidence": null }, { "source": "control:model/EV-11", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Attempt to introduce a triggered model that passes signature checks and confirm " }, "confidence": null }, { "source": "control:model/EV-12", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build the inversion/reconstruction test harness and integrate the pass/mitigate " }, "confidence": null }, { "source": "control:model/EV-12", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Own the attack methodology, leakage threshold, and mitigation-efficacy re-test." }, "confidence": null }, { "source": "control:model/EV-12", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evidence that privacy-attack resistance was tested and mitigated; coordinate wit" }, "confidence": null }, { "source": "control:model/EV-12", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Gate deployment on the test result; archive results and mitigation config." }, "confidence": null }, { "source": "control:model/EV-12", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Mount inversion/reconstruction attacks and attempt to recover training records a" }, "confidence": null }, { "source": "control:model/EV-13", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build the extraction/canary test harness and integrate the pass/mitigate gate." }, "confidence": null }, { "source": "control:model/EV-13", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Own the memorization methodology, canaries, and leakage threshold." }, "confidence": null }, { "source": "control:model/EV-13", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evidence that memorization was tested and mitigated; coordinate with Privacy DP-" }, "confidence": null }, { "source": "control:model/EV-13", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Gate deployment on the result; archive config." }, "confidence": null }, { "source": "control:model/EV-13", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Craft extraction prompts to recover memorized training records above threshold." }, "confidence": null }, { "source": "control:model/LI-01", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-01", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-01", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-01", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-01", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-02", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-02", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-02", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-02", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-02", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-03", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-03", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-03", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-03", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-03", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-04", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-04", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-04", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-04", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-04", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-05", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-05", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-05", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-05", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-05", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-06", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-06", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-06", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-06", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-06", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-07", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-07", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-07", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-07", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-07", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-08", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-08", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-08", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-08", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-08", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-09", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-09", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-09", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-09", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-09", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-10", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-10", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-10", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-10", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/LI-10", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:model/OA-01", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Enforce ownership as a registry schema constraint and pipeline gate; integrate w" }, "confidence": null }, { "source": "control:model/OA-01", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Verify that owner and sponsor are meaningful roles with relevant domain knowledg" }, "confidence": null }, { "source": "control:model/OA-01", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Ownership register is the primary evidence artifact for regulator inquiries abou" }, "confidence": null }, { "source": "control:model/OA-01", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Integrate ownership fields into model registry; surface ownership staleness in m" }, "confidence": null }, { "source": "control:model/OA-01", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test pipeline gate bypass paths; verify whether deployment automation can circum" }, "confidence": null }, { "source": "control:model/OA-02", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Instrument every model output that enters a human review queue with timing data," }, "confidence": null }, { "source": "control:model/OA-02", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evaluate oversight effectiveness as part of model validation \u2014 not only model ac" }, "confidence": null }, { "source": "control:model/OA-02", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "EU AI Act Art-14 compliance requires documented oversight design per use case. O" }, "confidence": null }, { "source": "control:model/OA-02", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Surface override rate alongside model performance metrics in operational dashboa" }, "confidence": null }, { "source": "control:model/OA-02", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe for automation bias paths: can a reviewer approve an output without seeing" }, "confidence": null }, { "source": "control:model/OA-03", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Integrate AIGC approval as a required gate in the model deployment pipeline for " }, "confidence": null }, { "source": "control:model/OA-03", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Model evaluation reports should be tabled at AIGC before deployment approval. Th" }, "confidence": null }, { "source": "control:model/OA-03", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "The AIGC is the primary governance body for AI risk. Its charter and minutes are" }, "confidence": null }, { "source": "control:model/OA-03", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Surface AIGC approval status in the model registry; block production promotion f" }, "confidence": null }, { "source": "control:model/OA-03", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test whether deployment automation can bypass AIGC approval; verify that thresho" }, "confidence": null }, { "source": "control:model/OA-04", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Tier assignment is read from the model registry by evaluation tooling to determi" }, "confidence": null }, { "source": "control:model/OA-04", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Tier level drives evaluation scope \u2014 evaluation team uses tier assignment to sel" }, "confidence": null }, { "source": "control:model/OA-04", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Tier assignment records document the organization's deliberate risk decisions ab" }, "confidence": null }, { "source": "control:model/OA-04", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Instrument action logs to detect tier boundary violations; alert when a model's " }, "confidence": null }, { "source": "control:model/OA-04", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test whether a model can be induced to take actions outside its assigned tier sc" }, "confidence": null }, { "source": "control:model/OA-05", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Pipeline gate must require a sign-off artifact ID from the legal registry before" }, "confidence": null }, { "source": "control:model/OA-05", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evaluation documentation must be structured to support regulatory review \u2014 evalu" }, "confidence": null }, { "source": "control:model/OA-05", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Legal sign-off is primary compliance evidence. Maintain a regulatory calendar to" }, "confidence": null }, { "source": "control:model/OA-05", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Surface legal sign-off status in the model registry dashboard; flag models with " }, "confidence": null }, { "source": "control:model/OA-05", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test whether deployment automation can bypass legal sign-off gates for models me" }, "confidence": null }, { "source": "control:model/OA-06", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement version pinning for all vendor model API integrations; instrument vend" }, "confidence": null }, { "source": "control:model/OA-06", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Vendor model evaluation must include testing against the organization's specific" }, "confidence": null }, { "source": "control:model/OA-06", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Vendor governance is a third-party risk management function. AI vendor risk must" }, "confidence": null }, { "source": "control:model/OA-06", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Monitor vendor model version in production; trigger review workflow when vendor " }, "confidence": null }, { "source": "control:model/OA-06", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test vendor model behavior for prompt injection vulnerabilities (AML.T0051), dat" }, "confidence": null }, { "source": "control:model/OA-07", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Instrument model incident detection to automatically page the relevant owner bas" }, "confidence": null }, { "source": "control:model/OA-07", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evaluation team is a key resource during incidents \u2014 their model knowledge infor" }, "confidence": null }, { "source": "control:model/OA-07", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Escalation chain is a key governance artifact. Regulatory notification mapping i" }, "confidence": null }, { "source": "control:model/OA-07", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "MLOps on-call is typically Level 1 responder. Ensure on-call rotation is integra" }, "confidence": null }, { "source": "control:model/OA-07", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test incident response by simulating a significant model failure; verify escalat" }, "confidence": null }, { "source": "control:model/OA-08", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build notice delivery, explanation generation, human review routing, and contest" }, "confidence": null }, { "source": "control:model/OA-08", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evaluate explanation mechanism accuracy as part of model evaluation \u2014 not only m" }, "confidence": null }, { "source": "control:model/OA-08", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Applicability determination log is primary compliance evidence. Legal review of " }, "confidence": null }, { "source": "control:model/OA-08", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Monitor contestability request volume and response time SLA compliance. Sudden i" }, "confidence": null }, { "source": "control:model/OA-08", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe for explanation gaming \u2014 can model behavior be designed to generate favora" }, "confidence": null }, { "source": "control:model/TG-01", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement quality gate as a composable pipeline stage (e.g., Great Expectations," }, "confidence": null }, { "source": "control:model/TG-01", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Quality gate failures are evaluation signals; track gate pass/fail rates over ti" }, "confidence": null }, { "source": "control:model/TG-01", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Quality attestations constitute audit evidence for EU AI Act Art. 10 data govern" }, "confidence": null }, { "source": "control:model/TG-01", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Integrate gate into ML CI/CD as a blocking step; surface gate metrics on the MLO" }, "confidence": null }, { "source": "control:model/TG-01", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Attempt to bypass the gate by manipulating provenance metadata, submitting datas" }, "confidence": null }, { "source": "control:model/TG-02", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Integrate representativeness analysis as a pipeline step post-data-assembly; use" }, "confidence": null }, { "source": "control:model/TG-02", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "BAR is a prerequisite artifact for the independent validation gate (EV-01). Eval" }, "confidence": null }, { "source": "control:model/TG-02", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "BAR is required technical documentation for EU AI Act Art. 10(3) and is an audit" }, "confidence": null }, { "source": "control:model/TG-02", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Track subgroup representation as a dataset version attribute in the feature stor" }, "confidence": null }, { "source": "control:model/TG-02", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe whether intersectional underrepresentation escapes detection by testing mo" }, "confidence": null }, { "source": "control:model/TG-03", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build DRR as a structured database with training-pipeline integration; implement" }, "confidence": null }, { "source": "control:model/TG-03", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Independent validation (EV-01) must verify that all training datasets used in a " }, "confidence": null }, { "source": "control:model/TG-03", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "DRR is the primary evidence artifact for data rights compliance across GDPR, CCP" }, "confidence": null }, { "source": "control:model/TG-03", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Surface DRR status in the dataset catalog and experiment tracker. Alert on DRR e" }, "confidence": null }, { "source": "control:model/TG-03", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe whether datasets can be added to training pipelines without DRR entries vi" }, "confidence": null }, { "source": "control:model/TG-04", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement integrity registry as an immutable ledger (append-only log store or cr" }, "confidence": null }, { "source": "control:model/TG-04", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Red-team the data integrity system before each major model release. Include pois" }, "confidence": null }, { "source": "control:model/TG-04", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Data poisoning incidents must be classified as security incidents under the inci" }, "confidence": null }, { "source": "control:model/TG-04", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Monitor hash verification failure rates and adversarial screening alert rates as" }, "confidence": null }, { "source": "control:model/TG-04", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Attempt label-flip attacks, backdoor triggers, and distributional poisoning via " }, "confidence": null }, { "source": "control:model/TG-05", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement contamination detection as a pipeline stage using content-addressable " }, "confidence": null }, { "source": "control:model/TG-05", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "The independent validation team (EV-01) must own and control test sets. Evaluate" }, "confidence": null }, { "source": "control:model/TG-05", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Contamination check audit logs are model validation evidence required by SR 26-2" }, "confidence": null }, { "source": "control:model/TG-05", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Track contamination rates and near-duplicate counts as dataset-quality metrics i" }, "confidence": null }, { "source": "control:model/TG-05", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe whether benchmark examples from known public datasets (e.g., MMLU, HumanEv" }, "confidence": null }, { "source": "control:model/TG-06", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Integrate PII scanning into the data ingestion pipeline using automated scanners" }, "confidence": null }, { "source": "control:model/TG-06", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Verify that models trained on de-identified data do not memorize PII from pre-tr" }, "confidence": null }, { "source": "control:model/TG-06", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "GDPR Art. 5(1)(c) minimization and Art. 25 by-design requirements must be docume" }, "confidence": null }, { "source": "control:model/TG-06", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Track PII scan detection rates and false-positive rates as data pipeline quality" }, "confidence": null }, { "source": "control:model/TG-06", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe model outputs for PII memorization via targeted prompting and extraction a" }, "confidence": null }, { "source": "control:model/TG-07", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement TPDR as a machine-readable catalog integrated with the training pipeli" }, "confidence": null }, { "source": "control:model/TG-07", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Independent validation (EV-01) must verify that all third-party datasets used in" }, "confidence": null }, { "source": "control:model/TG-07", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "TPDR is the primary evidence artifact for third-party data supply chain governan" }, "confidence": null }, { "source": "control:model/TG-07", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Surface TPDR status in the dataset catalog UI. Alert on TPDR entries approaching" }, "confidence": null }, { "source": "control:model/TG-07", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Attempt supply chain attacks via compromised vendor CDN, DNS hijacking of datase" }, "confidence": null }, { "source": "control:model/TG-08", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement the DLP in the data catalog and storage management system as enforced " }, "confidence": null }, { "source": "control:model/TG-08", "target": "lens:evaluation", "type": "has_lens", "provenance": { "source": "corpus", "note": "Include DLP compliance in the model card: document which training dataset versio" }, "confidence": null }, { "source": "control:model/TG-08", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "GDPR Art. 5(1)(e) storage limitation and Art. 17 erasure are hard legal requirem" }, "confidence": null }, { "source": "control:model/TG-08", "target": "lens:mlops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Integrate retention schedule enforcement into the data catalog; automate deletio" }, "confidence": null }, { "source": "control:model/TG-08", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe whether erased data records can be recovered from backup systems, derivati" }, "confidence": null }, { "source": "control:privacy/DC-01", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-01", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-01", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-01", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-02", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-02", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-02", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-02", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-03", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-03", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-03", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-03", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-04", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-04", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-04", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-04", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-05", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-05", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-05", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-05", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-06", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-06", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-06", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-06", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-07", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-07", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-07", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-07", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-08", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-08", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-08", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-08", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-09", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-09", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-09", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-09", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DC-09", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-01", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-01", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-01", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-01", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-02", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-02", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-02", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-02", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-03", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-03", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-03", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-03", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-04", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-04", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-04", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-04", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-05", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-05", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-05", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-05", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-06", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-06", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-06", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-06", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-07", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-07", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-07", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-07", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-08", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-08", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-08", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DG-08", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-01", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-01", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-01", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-01", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-02", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-02", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-02", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-02", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-03", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-03", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-03", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-03", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-04", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-04", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-04", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-04", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-05", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-05", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-05", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-05", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-06", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-06", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-06", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-06", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-07", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-07", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-07", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-07", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-08", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-08", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-08", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DP-08", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-01", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-01", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-01", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-01", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-02", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-02", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-02", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-02", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-03", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-03", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-03", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-03", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-04", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-04", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-04", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-04", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-05", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-05", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-05", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-05", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-06", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-06", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-06", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-06", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-07", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-07", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-07", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-07", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-08", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-08", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-08", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/DS-08", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-01", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-01", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-01", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-01", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-02", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-02", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-02", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-02", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-03", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-03", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-03", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-03", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-04", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-04", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-04", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-04", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-05", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-05", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-05", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-05", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-06", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-06", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-06", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-06", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-07", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-07", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-07", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-07", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-08", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-08", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-08", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PC-08", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-01", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-01", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-01", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-01", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-01", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-02", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-02", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-02", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-02", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-02", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-03", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-03", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-03", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-03", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-03", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-04", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-04", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-04", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-04", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-04", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-05", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-05", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-05", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-05", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-05", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-06", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-06", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-06", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-06", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-06", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-07", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-07", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-07", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-07", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-07", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-08", "target": "lens:data_governance", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-08", "target": "lens:dpo", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-08", "target": "lens:grc_auditor", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-08", "target": "lens:privacy_engineer", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:privacy/PM-08", "target": "lens:software_engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "[object Object]" }, "confidence": null }, { "source": "control:security/AS-01", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Reuse red-team scenarios as live detection content after launch (ties to RT-02)." }, "confidence": null }, { "source": "control:security/AS-01", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Wire AgentDojo/FinBot-style suites into the pre-launch pipeline with multi-turn " }, "confidence": null }, { "source": "control:security/AS-01", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "The pre-launch red-team report is a key release-readiness artifact." }, "confidence": null }, { "source": "control:security/AS-01", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "This is your home turf, hijack, drift, tool-misuse, exfiltration, measured again" }, "confidence": null }, { "source": "control:security/AS-01", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Knowing the agent's tested failure modes speeds triage when one shows up live." }, "confidence": null }, { "source": "control:security/AS-02", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Surface new high-severity CI findings to the security team." }, "confidence": null }, { "source": "control:security/AS-02", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Add SAST + manifest scanning as a blocking CI gate on every skill change." }, "confidence": null }, { "source": "control:security/AS-02", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "CI scan reports with commit SHA evidence supply-chain testing before release." }, "confidence": null }, { "source": "control:security/AS-02", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Try to slip a malicious skill past CI with an obfuscated pattern." }, "confidence": null }, { "source": "control:security/AS-02", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Blocking bad skills at CI keeps them out of production entirely." }, "confidence": null }, { "source": "control:security/AS-03", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Trend eval scores release-over-release to catch slow drift." }, "confidence": null }, { "source": "control:security/AS-03", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Make the eval suite a blocking release gate; re-run on model/prompt changes." }, "confidence": null }, { "source": "control:security/AS-03", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Per-release eval results map to EU AI Act Art. 9 continuous risk management." }, "confidence": null }, { "source": "control:security/AS-03", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Confirm a planted regression is actually caught by the gate." }, "confidence": null }, { "source": "control:security/AS-03", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Catching regressions pre-release keeps unsafe behaviour out of production." }, "confidence": null }, { "source": "control:security/AS-04", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Turn reported abuse paths into detection content." }, "confidence": null }, { "source": "control:security/AS-04", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Fold validated bounty findings into fixes and regression tests." }, "confidence": null }, { "source": "control:security/AS-04", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "A scoped bounty + remediation log evidences ongoing external assurance." }, "confidence": null }, { "source": "control:security/AS-04", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "External researchers extend your own red-team coverage, triage and reproduce the" }, "confidence": null }, { "source": "control:security/AS-04", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Bounty reports are early warning of abuse paths before they're exploited at scal" }, "confidence": null }, { "source": "control:security/AS-05", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Watch for capability-jump signals that should re-trigger assessment." }, "confidence": null }, { "source": "control:security/AS-05", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build staged-release controls tied to risk thresholds." }, "confidence": null }, { "source": "control:security/AS-05", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Frontier assessments + gating decisions evidence responsible release." }, "confidence": null }, { "source": "control:security/AS-05", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Probe the model's vuln-finding/exploit capability pre-release as a control evalu" }, "confidence": null }, { "source": "control:security/AS-05", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Knowing a model's offensive ceiling informs how tightly to monitor it in product" }, "confidence": null }, { "source": "control:security/AS-06", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on attempts to load an unsigned or signature-mismatched model." }, "confidence": null }, { "source": "control:security/AS-06", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Add model-signature verification (OMS/Sigstore) as a hard gate before load; keep" }, "confidence": null }, { "source": "control:security/AS-06", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Model provenance + ML-BOM evidence supply-chain integrity down to the weights." }, "confidence": null }, { "source": "control:security/AS-06", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Try to swap in a backdoored model or poison the training/fine-tune data." }, "confidence": null }, { "source": "control:security/AS-06", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Weight verification stops a poisoned model from ever reaching production." }, "confidence": null }, { "source": "control:security/AS-07", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert when a skill\u2019s runtime behavior exceeds its declared capabilities." }, "confidence": null }, { "source": "control:security/AS-07", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Diff each skill\u2019s actual capabilities (static analysis) against its declaration;" }, "confidence": null }, { "source": "control:security/AS-07", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Capability-diff audit reports evidence that skills were verified to do what they" }, "confidence": null }, { "source": "control:security/AS-07", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Ship a skill that declares read-file but also reads credentials and opens a shel" }, "confidence": null }, { "source": "control:security/AS-07", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Behavioral verification catches hidden multi-stage attack chains in legitimate-l" }, "confidence": null }, { "source": "control:security/AS-08", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on any change to policy, token issuance, or audit configuration, and on an" }, "confidence": null }, { "source": "control:security/AS-08", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Stand up the gateways, brokers, policy engines, and audit stores as separately-a" }, "confidence": null }, { "source": "control:security/AS-08", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evidence that the control plane is inventoried, access-controlled with separatio" }, "confidence": null }, { "source": "control:security/AS-08", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Attack the security layer directly: try to disable logging, mint tokens, edit po" }, "confidence": null }, { "source": "control:security/AS-08", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Run the freeze-the-control-plane playbook: revoke control-plane credentials, fre" }, "confidence": null }, { "source": "control:security/EC-01", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on syscalls or host access that the isolation tier should make impossible." }, "confidence": null }, { "source": "control:security/EC-01", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Pick the tier by workload: a userspace-kernel sandbox for medium risk, a hypervi" }, "confidence": null }, { "source": "control:security/EC-01", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "The deployment spec showing the isolation tier is your evidence of containment." }, "confidence": null }, { "source": "control:security/EC-01", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Run a sandbox-escape payload from the coding-agent runtime (per Plaskett documen" }, "confidence": null }, { "source": "control:security/EC-01", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "If an agent is compromised, strong isolation is what keeps the blast inside the " }, "confidence": null }, { "source": "control:security/EC-02", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on any blocked egress attempt and on non-HTTP/SOCKS traffic leaving an age" }, "confidence": null }, { "source": "control:security/EC-02", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Route agent egress through a default-deny proxy/firewall matched on SNI, plus a " }, "confidence": null }, { "source": "control:security/EC-02", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "The network-layer egress log is the artifact proving data couldn't leave to un-a" }, "confidence": null }, { "source": "control:security/EC-02", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Inject an exfil instruction to a canary domain, then try wildcard and null-byte " }, "confidence": null }, { "source": "control:security/EC-02", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Default-deny egress contains an active exfiltration while you respond." }, "confidence": null }, { "source": "control:security/EC-03", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert when stored memory is recalled that never passed validation, or when a wri" }, "confidence": null }, { "source": "control:security/EC-03", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Default memory to session scope; gate persistent writes behind validation; never" }, "confidence": null }, { "source": "control:security/EC-03", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "The memory-write audit log evidences that stored content was validated before re" }, "confidence": null }, { "source": "control:security/EC-03", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Plant an instruction in memory in one session and see if it executes in the next" }, "confidence": null }, { "source": "control:security/EC-03", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "If poisoning is found, the write log tells you what to purge and which sessions " }, "confidence": null }, { "source": "control:security/EC-04", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on denied tool calls and attempts to read outside the mounted scope." }, "confidence": null }, { "source": "control:security/EC-04", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Write a per-agent seccomp + mount profile; expose tools through an allowlist, de" }, "confidence": null }, { "source": "control:security/EC-04", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "The deployed capability manifest evidences least-privilege." }, "confidence": null }, { "source": "control:security/EC-04", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Try to bulk-read secrets and invoke a destructive tool the task did not grant; a" }, "confidence": null }, { "source": "control:security/EC-04", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Tight scope shrinks what a hijacked agent can damage." }, "confidence": null }, { "source": "control:security/EC-05", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on cost/usage spikes and on agents approaching their ceiling." }, "confidence": null }, { "source": "control:security/EC-05", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Enforce token/cost/step budgets at the gateway; fail closed on breach." }, "confidence": null }, { "source": "control:security/EC-05", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Budget records show spend was bounded, relevant to operational-risk controls." }, "confidence": null }, { "source": "control:security/EC-05", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Try to drive an agent into an expensive loop and see if anything stops it." }, "confidence": null }, { "source": "control:security/EC-05", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "A hard ceiling caps the financial blast radius of a runaway or hijacked agent." }, "confidence": null }, { "source": "control:security/EC-06", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on agents hitting iteration caps or abnormal tool-call rates." }, "confidence": null }, { "source": "control:security/EC-06", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Add max-iteration and recursion caps plus a tool-call-rate circuit breaker; scop" }, "confidence": null }, { "source": "control:security/EC-06", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Least-agency scoping is your record that autonomy was deliberately bounded." }, "confidence": null }, { "source": "control:security/EC-06", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Try to induce an endless loop or push the agent past its granted autonomy." }, "confidence": null }, { "source": "control:security/EC-06", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Circuit breakers stop a runaway before it exhausts resources or spreads." }, "confidence": null }, { "source": "control:security/EC-07", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert when low-trust or external content is retrieved into a high-stakes task." }, "confidence": null }, { "source": "control:security/EC-07", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Make retrieval identity-aware and attach a trust rank + provenance to every chun" }, "confidence": null }, { "source": "control:security/EC-07", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Retrieval logs evidence that content sources were vetted and access-scoped." }, "confidence": null }, { "source": "control:security/EC-07", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Seed a poisoned doc into the knowledge base and see if the agent ingests it as f" }, "confidence": null }, { "source": "control:security/EC-07", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "When poisoning is found, retrieval provenance shows which sessions consumed it." }, "confidence": null }, { "source": "control:security/EC-08", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert when a credential pattern appears in a prompt, tool description, or contex" }, "confidence": null }, { "source": "control:security/EC-08", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Pull secrets from a broker at call time; keep them out of prompts and config ent" }, "confidence": null }, { "source": "control:security/EC-08", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Secret-scan reports over prompts/config evidence that credentials aren't exposed" }, "confidence": null }, { "source": "control:security/EC-08", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Try to extract the system prompt and any secrets in context (garak prompt-leak p" }, "confidence": null }, { "source": "control:security/EC-08", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Secrets fetched at point-of-use limit what an extracted context can reveal." }, "confidence": null }, { "source": "control:security/EC-09", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert when an agent loads config or runs a hook sourced from the working directo" }, "confidence": null }, { "source": "control:security/EC-09", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Gate workspace trust; never auto-load repo mcp.json/.cursor/.git hooks; disable " }, "confidence": null }, { "source": "control:security/EC-09", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Workspace-trust and config-approval logs evidence that repo-borne config cannot " }, "confidence": null }, { "source": "control:security/EC-09", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Open a malicious repo with a planted mcp.json/.git/hooks and a dangerous-mode fl" }, "confidence": null }, { "source": "control:security/EC-09", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Untrusted-workspace handling contains a poisoned-repo attack to the sandbox." }, "confidence": null }, { "source": "control:security/EC-10", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on a run admitted from an unsigned, replayed, or unlisted trigger, or a sc" }, "confidence": null }, { "source": "control:security/EC-10", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Put an admission controller in front of triggers: verify signature, dedupe/repla" }, "confidence": null }, { "source": "control:security/EC-10", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Closes the admission gap for full-agency agents; the evidence is admission logs " }, "confidence": null }, { "source": "control:security/EC-10", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Forge and replay triggers (webhooks, emails, queue messages) and see whether you" }, "confidence": null }, { "source": "control:security/EC-10", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "When an unexpected run fires, the admission record shows which trigger started i" }, "confidence": null }, { "source": "control:security/EC-11", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on unsigned/outdated accelerator firmware or failed TEE attestation." }, "confidence": null }, { "source": "control:security/EC-11", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Implement firmware pinning/verification and TEE attestation in the accelerator p" }, "confidence": null }, { "source": "control:security/EC-11", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evidence of firmware-signature and TEE-attestation enforcement per accelerator/d" }, "confidence": null }, { "source": "control:security/EC-11", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Attempt weight exfiltration via firmware tampering or cross-workload accelerator" }, "confidence": null }, { "source": "control:security/EC-11", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Monitor accelerator firmware versions and attestation status; gate scheduling on" }, "confidence": null }, { "source": "control:security/EC-12", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert when a new CISA KEV entry matches a production serving-stack component or " }, "confidence": null }, { "source": "control:security/EC-12", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Wire SBOM generation and full-stack vulnerability scanning into the AI-serving b" }, "confidence": null }, { "source": "control:security/EC-12", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Evidence that KEV-listed vulnerabilities on production AI components are remedia" }, "confidence": null }, { "source": "control:security/EC-12", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Attempt to exploit an unpatched, known-exploited vulnerability in the inference " }, "confidence": null }, { "source": "control:security/EC-12", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Track KEV exposure across the AI-serving fleet; drive KEV-listed flaws to remedi" }, "confidence": null }, { "source": "control:security/GV-01", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert if an irreversible action ever completes without a matching approval event" }, "confidence": null }, { "source": "control:security/GV-01", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Put a deterministic approval gate in front of irreversible actions; wire it to a" }, "confidence": null }, { "source": "control:security/GV-01", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "The approval record is direct evidence a human authorised every irreversible act" }, "confidence": null }, { "source": "control:security/GV-01", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Try to get the agent to self-approve or bypass the gate via injection." }, "confidence": null }, { "source": "control:security/GV-01", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "The hard-stop is your last line before an unrecoverable action lands." }, "confidence": null }, { "source": "control:security/GV-02", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "These logs are your primary detection source, alert if the log stream goes silen" }, "confidence": null }, { "source": "control:security/GV-02", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Ship agent events to an append-only, hash-chained store outside the agent's reac" }, "confidence": null }, { "source": "control:security/GV-02", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Append-only logs with retention mapped to EU AI Act Art. 12 are core compliance " }, "confidence": null }, { "source": "control:security/GV-02", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Try to make the agent rewrite or delete its own audit trail." }, "confidence": null }, { "source": "control:security/GV-02", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "An un-forgeable timeline is what lets you reconstruct an incident after the fact" }, "confidence": null }, { "source": "control:security/GV-03", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on authority conflicts and on a fault spreading across more than one agent" }, "confidence": null }, { "source": "control:security/GV-03", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Encode authority and conflict-resolution rules into the orchestrator; add explic" }, "confidence": null }, { "source": "control:security/GV-03", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "The documented authority model evidences governed multi-agent operation." }, "confidence": null }, { "source": "control:security/GV-03", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Force two agents into conflict and try to trigger a cascade." }, "confidence": null }, { "source": "control:security/GV-03", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Clear authority and stop conditions keep one agent's failure from becoming many." }, "confidence": null }, { "source": "control:security/GV-04", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on policy denials and on the engine failing open." }, "confidence": null }, { "source": "control:security/GV-04", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Put an OPA-style policy engine in the request path; fail closed; cover all ten O" }, "confidence": null }, { "source": "control:security/GV-04", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Policy-decision logs evidence that the rules were enforced, not merely written." }, "confidence": null }, { "source": "control:security/GV-04", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Look for actions that bypass the engine or for fail-open behaviour when detector" }, "confidence": null }, { "source": "control:security/GV-04", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "In-path enforcement blocks bad actions in real time rather than after the fact." }, "confidence": null }, { "source": "control:security/GV-05", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Watch for agents operating above their assigned tier's permissions." }, "confidence": null }, { "source": "control:security/GV-05", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Adopt an autonomy-tier model (AWS Scoping Matrix) and apply control sets per tie" }, "confidence": null }, { "source": "control:security/GV-05", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "ISO/IEC 42001 records + the tiering register are your core governance evidence." }, "confidence": null }, { "source": "control:security/GV-05", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Look for high-autonomy agents governed as if they were low-risk." }, "confidence": null }, { "source": "control:security/GV-05", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Knowing each agent's risk tier prioritises monitoring and response." }, "confidence": null }, { "source": "control:security/GV-06", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on bursts of irreversible actions or steady drip below the per-action thre" }, "confidence": null }, { "source": "control:security/GV-06", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Add aggregate + velocity counters on irreversible operations; halt-and-escalate " }, "confidence": null }, { "source": "control:security/GV-06", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Volume records evidence that aggregate blast radius was bounded, not just single" }, "confidence": null }, { "source": "control:security/GV-06", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Try death-by-a-thousand-cuts: many small irreversible actions under the approval" }, "confidence": null }, { "source": "control:security/GV-06", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Velocity caps stop a compromised agent from doing maximum damage quickly." }, "confidence": null }, { "source": "control:security/GV-07", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on agent output impersonating a person or asserting authority it doesn't h" }, "confidence": null }, { "source": "control:security/GV-07", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Label agent output to humans and feed the approval UI independent action facts, " }, "confidence": null }, { "source": "control:security/GV-07", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "This closes OWASP ASI09, evidence the human checkpoint can't be talked past." }, "confidence": null }, { "source": "control:security/GV-07", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Social-engineer the approver and try to impersonate an executive through the age" }, "confidence": null }, { "source": "control:security/GV-07", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Trust indicators help responders spot agent-driven social engineering early." }, "confidence": null }, { "source": "control:security/GV-08", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on duplicate / replayed high-impact actions and on commits that land after" }, "confidence": null }, { "source": "control:security/GV-08", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Give high-impact actions idempotency keys; re-check authz and state at commit, n" }, "confidence": null }, { "source": "control:security/GV-08", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Transaction logs evidence that actions were atomic and re-authorized at commit." }, "confidence": null }, { "source": "control:security/GV-08", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Flood the orchestrator and race a revocation against an in-flight action to doub" }, "confidence": null }, { "source": "control:security/GV-08", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Idempotency plus commit-time checks stop a flooded or hijacked agent from racing" }, "confidence": null }, { "source": "control:security/GV-09", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Flag production agents with no bound business owner." }, "confidence": null }, { "source": "control:security/GV-09", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Bind a named business-owner identity to each agent workload object; surface it i" }, "confidence": null }, { "source": "control:security/GV-09", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Closes the CISA Accountability risk class and ISO A.3.2; owner binding plus RACI" }, "confidence": null }, { "source": "control:security/GV-09", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Find a high-impact agent and see whether anyone is clearly accountable for it." }, "confidence": null }, { "source": "control:security/GV-09", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Knowing the business and engineering owner instantly is what unblocks incident r" }, "confidence": null }, { "source": "control:security/GV-10", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on automation-bias signatures: override rate approaching zero, review late" }, "confidence": null }, { "source": "control:security/GV-10", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Surface an in-product AI disclosure and action-scope notice; emit approval event" }, "confidence": null }, { "source": "control:security/GV-10", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Closes the end-user-responsibility dimension (MGF 2.4) and the automation-bias r" }, "confidence": null }, { "source": "control:security/GV-10", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Test whether a reviewer will rubber-stamp a subtly wrong action, and whether use" }, "confidence": null }, { "source": "control:security/GV-10", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "When an approved action goes wrong, the oversight telemetry shows whether the ch" }, "confidence": null }, { "source": "control:security/GV-11", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Track unreversed effects after a stop: completed external actions with no compen" }, "confidence": null }, { "source": "control:security/GV-11", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Classify actions by reversibility, snapshot before high-impact writes, and regis" }, "confidence": null }, { "source": "control:security/GV-11", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Recovery and restitution is the gap after prevention and kill; the evidence is r" }, "confidence": null }, { "source": "control:security/GV-11", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Drive an agent to commit an irreversible external action, then trigger a stop an" }, "confidence": null }, { "source": "control:security/GV-11", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "When you stop a runaway agent, the compensation layer is what returns the system" }, "confidence": null }, { "source": "control:security/IA-01", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert when an agent process authenticates with a human account or an identity yo" }, "confidence": null }, { "source": "control:security/IA-01", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Issue each agent a SPIFFE SVID or directory identity at start-up; never pass it " }, "confidence": null }, { "source": "control:security/IA-01", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Maintain an agent register tying every identity to an owner and purpose, this is" }, "confidence": null }, { "source": "control:security/IA-01", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Try to make one agent impersonate another, or run an agent under a borrowed user" }, "confidence": null }, { "source": "control:security/IA-01", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "When an agent misbehaves, its distinct identity is what lets you isolate just th" }, "confidence": null }, { "source": "control:security/IA-02", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on any tool call presenting a reused or long-lived bearer token instead of" }, "confidence": null }, { "source": "control:security/IA-02", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Swap stored API keys for run-time token-exchange: present the agent's identity, " }, "confidence": null }, { "source": "control:security/IA-02", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "The broker's issuance log (who got what scope, for how long) is your evidence th" }, "confidence": null }, { "source": "control:security/IA-02", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Steal a token and replay it after expiry and outside its scope, both should fail" }, "confidence": null }, { "source": "control:security/IA-02", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Short lifetimes mean a stolen token is near-useless minutes later, shrinking the" }, "confidence": null }, { "source": "control:security/IA-03", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert when a sensitive action proceeds without a matching approval event." }, "confidence": null }, { "source": "control:security/IA-03", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Use token-exchange with an actor claim so the token says 'agent acting for user " }, "confidence": null }, { "source": "control:security/IA-03", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Every sensitive action should resolve to a named human approver, that linkage is" }, "confidence": null }, { "source": "control:security/IA-03", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Inject instructions to push the agent past the user's intent; confirm the scope " }, "confidence": null }, { "source": "control:security/IA-03", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Delegation tokens show both the agent and the user, so you can trace an action t" }, "confidence": null }, { "source": "control:security/IA-04", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert if a tool call succeeds against a permission that was already revoked." }, "confidence": null }, { "source": "control:security/IA-04", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Move from session-start auth to per-call policy checks (OPA/NGAC in the request " }, "confidence": null }, { "source": "control:security/IA-04", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "The per-call decision log proves authority was checked continuously, not just at" }, "confidence": null }, { "source": "control:security/IA-04", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Get authorised, have the permission pulled mid-task, then try one more action, i" }, "confidence": null }, { "source": "control:security/IA-04", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Instant revocation is your fastest containment lever short of a kill switch." }, "confidence": null }, { "source": "control:security/IA-05", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on any agent process with system access that has no issued identity." }, "confidence": null }, { "source": "control:security/IA-05", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Feed endpoint/SaaS agent signals into a reconciliation job against your identity" }, "confidence": null }, { "source": "control:security/IA-05", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "The reconciliation report is your evidence that no ungoverned agents are operati" }, "confidence": null }, { "source": "control:security/IA-05", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Launch an unsanctioned agent and measure how long until it's discovered." }, "confidence": null }, { "source": "control:security/IA-05", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Shadow-agent discovery is often the first warning of a rogue or compromised agen" }, "confidence": null }, { "source": "control:security/IA-06", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert when an action arrives with a missing, unverifiable, or replayed upstream " }, "confidence": null }, { "source": "control:security/IA-06", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Sign each hop with the agent's workload identity over the request plus the upstr" }, "confidence": null }, { "source": "control:security/IA-06", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "This is the chain-of-custody EU AI Act Art. 12 record-keeping needs to be eviden" }, "confidence": null }, { "source": "control:security/IA-06", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Try to forge or replay a hand-off so an action attributes to the wrong agent, or" }, "confidence": null }, { "source": "control:security/IA-06", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "In an incident, the signed chain tells you which agent and which delegation led " }, "confidence": null }, { "source": "control:security/PT-01", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on agent-to-agent calls with unsigned, failed, or re-hosted cards." }, "confidence": null }, { "source": "control:security/PT-01", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Verify the A2A Agent Card's JWS against a pinned key and require HTTPS at the we" }, "confidence": null }, { "source": "control:security/PT-01", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Inter-agent verification logs evidence that only authenticated agents were trust" }, "confidence": null }, { "source": "control:security/PT-01", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Tamper with or re-host an Agent Card and replay a stale signature against the ve" }, "confidence": null }, { "source": "control:security/PT-01", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Card verification is the fast way to tell a genuine partner agent from an impost" }, "confidence": null }, { "source": "control:security/PT-02", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on connections to un-registered MCP servers and on tools used outside thei" }, "confidence": null }, { "source": "control:security/PT-02", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Make MCP servers resource servers; bind tokens with RFC 8707; put new tools thro" }, "confidence": null }, { "source": "control:security/PT-02", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "The tool registry is your inventory and approval record for everything the agent" }, "confidence": null }, { "source": "control:security/PT-02", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Wire a rogue MCP server in (GTG-1002 style) and try token passthrough between se" }, "confidence": null }, { "source": "control:security/PT-02", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "A governed registry lets you cut off a malicious tool across all agents at once." }, "confidence": null }, { "source": "control:security/PT-03", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on unsigned or signature-failed skill loads and on manifest drift." }, "confidence": null }, { "source": "control:security/PT-03", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Sign manifests with Ed25519 and verify on load and on update; keep an SBOM." }, "confidence": null }, { "source": "control:security/PT-03", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Signature logs and the SBOM evidence supply-chain integrity." }, "confidence": null }, { "source": "control:security/PT-03", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Submit a weaponised community skill and a silent malicious update; see if either" }, "confidence": null }, { "source": "control:security/PT-03", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Signatures let you trace and revoke a compromised skill across the fleet." }, "confidence": null }, { "source": "control:security/PT-04", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on tool responses that fail schema validation or contain instruction-like " }, "confidence": null }, { "source": "control:security/PT-04", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Enforce JSON schemas on tool I/O and sanitise tool output before it re-enters th" }, "confidence": null }, { "source": "control:security/PT-04", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "I/O validation logs evidence that tool output was treated as untrusted." }, "confidence": null }, { "source": "control:security/PT-04", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Embed injection payloads in tool responses (InjecAgent/AgentDojo) and see if the" }, "confidence": null }, { "source": "control:security/PT-04", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Output sanitisation blunts indirect injection before it reaches the agent's next" }, "confidence": null }, { "source": "control:security/PT-05", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert when downstream systems receive agent output containing executable/injecti" }, "confidence": null }, { "source": "control:security/PT-05", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Encode agent output per destination and validate it at the receiving system; don" }, "confidence": null }, { "source": "control:security/PT-05", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Boundary validation logs evidence that agent output couldn't poison downstream s" }, "confidence": null }, { "source": "control:security/PT-05", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Get the agent to emit an XSS/SQLi/command payload and see if a downstream system" }, "confidence": null }, { "source": "control:security/PT-05", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Output handling stops one compromised agent from cascading into others." }, "confidence": null }, { "source": "control:security/PT-06", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on injection patterns (SQL, shell, vector-filter, prompt, system-override)" }, "confidence": null }, { "source": "control:security/PT-06", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Parameterize tool backends; run an in-path fail-closed sanitizer over model-writ" }, "confidence": null }, { "source": "control:security/PT-06", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Sanitizer risk-score logs evidence that model-written tool arguments were treate" }, "confidence": null }, { "source": "control:security/PT-06", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Pass schema validation but inject a payload inside a free-text field (query/path" }, "confidence": null }, { "source": "control:security/PT-06", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Catching prose-nested injection stops a valid-looking tool call from becoming an" }, "confidence": null }, { "source": "control:security/PT-07", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert when a tool description contains imperative instructions or changes after " }, "confidence": null }, { "source": "control:security/PT-07", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Scan and sign tool descriptions before the model ingests them; treat registry/MC" }, "confidence": null }, { "source": "control:security/PT-07", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Tool-metadata verification logs evidence that descriptions were checked, not tru" }, "confidence": null }, { "source": "control:security/PT-07", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Poison a tool\u2019s description with a hidden instruction and see if the agent follo" }, "confidence": null }, { "source": "control:security/PT-07", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Description verification stops a poisoned tool listing from hijacking the agent\u2019" }, "confidence": null }, { "source": "control:security/PT-08", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Flag tool returns that contain imperative content conflicting with the system in" }, "confidence": null }, { "source": "control:security/PT-08", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Put system instructions in the developer/system role; admit tool output under th" }, "confidence": null }, { "source": "control:security/PT-08", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Maps to OWASP LLM01 Prompt Injection; the evidence is role-separated transcripts" }, "confidence": null }, { "source": "control:security/PT-08", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Plant 'ignore previous instructions' payloads in tool results and web pages and " }, "confidence": null }, { "source": "control:security/PT-08", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "When an agent goes off-task, the role tags show whether a tool return tried to r" }, "confidence": null }, { "source": "control:security/RT-01", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build detections on agent process lineage, unsanctioned shells, off-manifest bin" }, "confidence": null }, { "source": "control:security/RT-01", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Deploy EDR on agent hosts and correlate process trees to agent identities." }, "confidence": null }, { "source": "control:security/RT-01", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "OS-level activity records evidence that agent behaviour is actually observed, no" }, "confidence": null }, { "source": "control:security/RT-01", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Have the agent live-off-the-land (spawn shells, call system tools) and see if OS" }, "confidence": null }, { "source": "control:security/RT-01", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Process lineage is what lets you scope and contain a compromised agent host." }, "confidence": null }, { "source": "control:security/RT-02", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on detected injection attempts and track attack-success-rate over time." }, "confidence": null }, { "source": "control:security/RT-02", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Wrap the agent in input+output injection guardrails; redact secrets at the bound" }, "confidence": null }, { "source": "control:security/RT-02", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Injection-eval reports evidence the control is measured, not assumed." }, "confidence": null }, { "source": "control:security/RT-02", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Run AgentDojo/garak injection suites and report ASR before vs after the guardrai" }, "confidence": null }, { "source": "control:security/RT-02", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Real-time injection blocking stops a hijack before the agent executes the attack" }, "confidence": null }, { "source": "control:security/RT-03", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert when the agent's actions diverge from its stated plan, or the supervisor g" }, "confidence": null }, { "source": "control:security/RT-03", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Add a separate supervisor model over the agent's reasoning+action stream; flag i" }, "confidence": null }, { "source": "control:security/RT-03", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Supervisor logs evidence that reasoning was monitored, not just outputs." }, "confidence": null }, { "source": "control:security/RT-03", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Try to make the agent act against its stated intent without the supervisor notic" }, "confidence": null }, { "source": "control:security/RT-03", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Reasoning-vs-action divergence is an early signal of a hijack in progress." }, "confidence": null }, { "source": "control:security/RT-04", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Feed anomalies (unverifiable actions, lateral movement) into automated response " }, "confidence": null }, { "source": "control:security/RT-04", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build pause + kill + isolate as graduated responses, enforced outside the agent;" }, "confidence": null }, { "source": "control:security/RT-04", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Drill records evidence that containment works on a known cadence." }, "confidence": null }, { "source": "control:security/RT-04", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Trigger anomalies and time how fast containment actually engages; try to outrun " }, "confidence": null }, { "source": "control:security/RT-04", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "This is your live stop button, graceful pause for review, hard kill for clear da" }, "confidence": null }, { "source": "control:security/RT-05", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on DLP hits in agent egress and on sensitive patterns in agent output." }, "confidence": null }, { "source": "control:security/RT-05", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Insert DLP/content inspection on agent output and egress; redact secrets and reg" }, "confidence": null }, { "source": "control:security/RT-05", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "DLP logs evidence that sensitive data didn't leave through the agent." }, "confidence": null }, { "source": "control:security/RT-05", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Try to exfiltrate planted regulated data and credentials through agent output." }, "confidence": null }, { "source": "control:security/RT-05", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "DLP is a second net behind egress filtering for data on the way out." }, "confidence": null }, { "source": "control:security/RT-06", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Build detections for tool-chained killchains and real-time pivots, not just sing" }, "confidence": null }, { "source": "control:security/RT-06", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Tag your detections to ATLAS agentic technique IDs and add custom IDs for orches" }, "confidence": null }, { "source": "control:security/RT-06", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "An ATLAS-mapped threat model evidences current, AI-native threat coverage." }, "confidence": null }, { "source": "control:security/RT-06", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Run an orchestration-style killchain (GTG-1002 pattern) and see whether scoring " }, "confidence": null }, { "source": "control:security/RT-06", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Watching scaffolding/orchestration catches the attacks that per-technique scorin" }, "confidence": null }, { "source": "control:security/RT-07", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert on coordinated cross-agent patterns and anomalous inter-agent traffic." }, "confidence": null }, { "source": "control:security/RT-07", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Add cross-agent correlation analytics and inspect inter-agent payloads for cover" }, "confidence": null }, { "source": "control:security/RT-07", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "Correlation logs evidence that multi-agent collusion is actually watched for (a " }, "confidence": null }, { "source": "control:security/RT-07", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Split an attack across two cooperating agents and hide coordination in an authen" }, "confidence": null }, { "source": "control:security/RT-07", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Cross-agent correlation reveals attacks invisible in any single agent's timeline" }, "confidence": null }, { "source": "control:security/RT-08", "target": "lens:detection", "type": "has_lens", "provenance": { "source": "corpus", "note": "Alert when visible reasoning diverges from internal-state indicators (oversight " }, "confidence": null }, { "source": "control:security/RT-08", "target": "lens:engineering", "type": "has_lens", "provenance": { "source": "corpus", "note": "Add logit/representation anomaly detection and activation probes where you can a" }, "confidence": null }, { "source": "control:security/RT-08", "target": "lens:grc", "type": "has_lens", "provenance": { "source": "corpus", "note": "An emerging control; evidence is partial, record it as a known frontier limit (d" }, "confidence": null }, { "source": "control:security/RT-08", "target": "lens:red_team", "type": "has_lens", "provenance": { "source": "corpus", "note": "Sandbag the visible chain-of-thought to appease the supervisor while pursuing a " }, "confidence": null }, { "source": "control:security/RT-08", "target": "lens:secops", "type": "has_lens", "provenance": { "source": "corpus", "note": "Representation-level signals can catch a deceptive agent that looks clean in its" }, "confidence": null }, { "source": "AML.T0000", "target": "AML.TA0002", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0000.000", "target": "AML.TA0002", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0000.001", "target": "AML.TA0002", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0000.002", "target": "AML.TA0002", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0001", "target": "AML.TA0002", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0002", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0002.000", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0002.001", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0002.002", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0003", "target": "AML.TA0002", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0004", "target": "AML.TA0002", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005.000", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005.001", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005.002", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0006", "target": "AML.TA0002", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0007", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0008", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0008.000", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0008.001", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0008.002", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0008.003", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0008.004", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0008.005", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.000", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.001", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.002", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.003", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.004", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.005", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011", "target": "AML.TA0005", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.000", "target": "AML.TA0005", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.001", "target": "AML.TA0005", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.002", "target": "AML.TA0005", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.003", "target": "AML.TA0005", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0012", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0012", "target": "AML.TA0012", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0013", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0014", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0015", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0015", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0015", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0016", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0016.000", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0016.001", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0016.002", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0017", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0017.000", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.000", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.000", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.001", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.001", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.002", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.002", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0019", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0020", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0020", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0021", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024", "target": "AML.TA0010", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024.000", "target": "AML.TA0010", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024.001", "target": "AML.TA0010", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024.002", "target": "AML.TA0010", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0025", "target": "AML.TA0010", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0029", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0031", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0034", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0034.000", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0034.001", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0034.002", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0035", "target": "AML.TA0009", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0036", "target": "AML.TA0009", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0037", "target": "AML.TA0009", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0040", "target": "AML.TA0000", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0041", "target": "AML.TA0000", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0042", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.000", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.001", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.002", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.003", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.004", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0044", "target": "AML.TA0000", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0046", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0047", "target": "AML.TA0000", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0048", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0048.000", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0048.001", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0048.002", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0048.003", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0048.004", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0049", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0050", "target": "AML.TA0005", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051", "target": "AML.TA0005", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051.000", "target": "AML.TA0005", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051.001", "target": "AML.TA0005", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051.002", "target": "AML.TA0005", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0052", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0052", "target": "AML.TA0015", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0052.000", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0052.000", "target": "AML.TA0015", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0052.001", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0052.001", "target": "AML.TA0015", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0053", "target": "AML.TA0005", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0053", "target": "AML.TA0012", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0054", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0054", "target": "AML.TA0012", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0055", "target": "AML.TA0013", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0056", "target": "AML.TA0010", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0057", "target": "AML.TA0010", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0058", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0059", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0060", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0061", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0062", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0063", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0064", "target": "AML.TA0002", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0065", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0066", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0067", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0067.000", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0068", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0069", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0069.000", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0069.001", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0069.002", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0070", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0071", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0072", "target": "AML.TA0014", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0073", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0074", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0075", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0076", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0077", "target": "AML.TA0010", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0078", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0079", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0080", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0080.000", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0080.001", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0081", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0081", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0082", "target": "AML.TA0013", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0083", "target": "AML.TA0013", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0084", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0084.000", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0084.001", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0084.002", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0084.003", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085", "target": "AML.TA0009", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085.000", "target": "AML.TA0009", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085.001", "target": "AML.TA0009", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0086", "target": "AML.TA0010", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0087", "target": "AML.TA0002", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0088", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0089", "target": "AML.TA0008", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0090", "target": "AML.TA0013", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0091", "target": "AML.TA0015", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0091.000", "target": "AML.TA0015", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0091.001", "target": "AML.TA0015", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0092", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0093", "target": "AML.TA0004", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0093", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0094", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0095", "target": "AML.TA0002", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0095.000", "target": "AML.TA0002", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0096", "target": "AML.TA0014", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0097", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0098", "target": "AML.TA0013", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0099", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0100", "target": "AML.TA0005", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0101", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0102", "target": "AML.TA0001", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0103", "target": "AML.TA0005", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0104", "target": "AML.TA0003", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0105", "target": "AML.TA0012", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0106", "target": "AML.TA0013", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0107", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0108", "target": "AML.TA0014", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0109", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0110", "target": "AML.TA0006", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0111", "target": "AML.TA0007", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0112", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0112.000", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0112.001", "target": "AML.TA0011", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0113", "target": "AML.TA0013", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0114", "target": "AML.TA0014", "type": "in_tactic", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "control:agentic/AA-01", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AA-01", "target": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AA-01", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AA-01", "target": "clause:mitre_atlas:AML.T0012", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-01", "target": "clause:nist_rmf:GOVERN 4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AA-01", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:agentic/AA-01", "target": "clause:salesforce_trust:Audit trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-02", "target": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens, OAuth", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AA-02", "target": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AA-02", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AA-02", "target": "clause:microsoft_rai:PS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "direct" }, { "source": "control:agentic/AA-02", "target": "clause:nist_rmf:MANAGE 2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AA-03", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Enterprise: mu", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AA-03", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AA-03", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AA-03", "target": "clause:microsoft_rai:PS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AA-03", "target": "clause:mitre_atlas:AML.T0040", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-03", "target": "clause:nist_rmf:MEASURE 2.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AA-04", "target": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (identity-based isolation: ev", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AA-04", "target": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AA-04", "target": "clause:iso_42001:6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AA-04", "target": "clause:microsoft_rai:PS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AA-04", "target": "clause:nist_rmf:GOVERN 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AA-05", "target": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens); Part", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:agentic/AA-05", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AA-05", "target": "clause:microsoft_rai:PS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AA-05", "target": "clause:nist_ai_600_1:MS-2.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-05", "target": "clause:nist_rmf:MANAGE 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AA-05", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-06", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AA-06", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-06", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AA-06", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AA-06", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AA-06", "target": "clause:mitre_atlas:AML.T0012", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:agentic/AA-06", "target": "clause:nist_rmf:MANAGE 3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AA-06", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy and Autonom", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-06", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AA-06", "target": "clause:salesforce_trust:Audit trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-07", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse detection and rapid respo", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-07", "target": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (alert when thresholds exceeded", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:agentic/AA-07", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AA-07", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AA-07", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AA-07", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "direct" }, { "source": "control:agentic/AA-07", "target": "clause:mitre_atlas:AML.T0012", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:agentic/AA-07", "target": "clause:nist_ai_600_1:MS-2.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-07", "target": "clause:nist_rmf:MEASURE 2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AA-07", "target": "clause:salesforce_trust:Audit trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-08", "target": "clause:anthropic_rsp:Risk Reports (\u00a73) \u2014 documented capability and safeguard evid", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-08", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AA-08", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-08", "target": "clause:iso_42001:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AA-08", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AA-08", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AA-08", "target": "clause:nist_rmf:GOVERN 4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AA-08", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AA-08", "target": "clause:salesforce_trust:Audit trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-01", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AB-01", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AB-01", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AB-01", "target": "clause:iso_42001:6.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AB-01", "target": "clause:microsoft_rai:RS1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "direct" }, { "source": "control:agentic/AB-01", "target": "clause:mitre_atlas:AML.M0015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-01", "target": "clause:mitre:AML.M0026", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-01", "target": "clause:mitre:AML.M0027", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-01", "target": "clause:mitre:AML.M0028", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-01", "target": "clause:nist_rmf:GOVERN 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AB-01", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-01", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:agentic/AB-01", "target": "clause:salesforce_trust:Audit trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-02", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing; Part IV Phase 5 \u2014 Capa", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AB-02", "target": "clause:eu_ai_act:14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AB-02", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AB-02", "target": "clause:microsoft_rai:PS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AB-02", "target": "clause:mitre:AML.M0026", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-02", "target": "clause:mitre:AML.M0027", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-02", "target": "clause:mitre:AML.M0028", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-02", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine inspects labels before e", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ms_ifc_agents", "relation": "informs", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:agentic/AB-02", "target": "clause:nist_rmf:GOVERN 3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AB-02", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AB-02", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AB-02", "target": "clause:salesforce_trust:Audit trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-03", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-03", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AB-03", "target": "clause:aws_bedrock_guardrails:Contextual grounding checks", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-03", "target": "clause:eu_ai_act:14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AB-03", "target": "clause:google_saif:Agent User Control (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AB-03", "target": "clause:iso_31000:6.5.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_31000", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:agentic/AB-03", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AB-03", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AB-03", "target": "clause:nist_rmf:MANAGE 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AB-03", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-03", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-04", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 misuse-prevention safeguards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-04", "target": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AB-04", "target": "clause:aws_bedrock_guardrails:Sensitive information filters", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:agentic/AB-04", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-04", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AB-04", "target": "clause:microsoft_rai:PS1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "direct" }, { "source": "control:agentic/AB-04", "target": "clause:mitre:AML.M0002", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-04", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-04", "target": "clause:nist_ai_600_1:2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AB-04", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-04", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AB-04", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:agentic/AB-04", "target": "clause:owasp_llm10:LLM02:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AB-04", "target": "clause:salesforce_trust:Data masking", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AB-05", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 robustness to jailbreak and misu", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-05", "target": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AB-05", "target": "clause:aws_bedrock_guardrails:Content filters \u2014 prompt attack detection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:agentic/AB-05", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:agentic/AB-05", "target": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AB-05", "target": "clause:microsoft_rai:RS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AB-05", "target": "clause:mitre_atlas:AML.T0051", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:agentic/AB-05", "target": "clause:mitre:AML.M0015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-05", "target": "clause:ms_ifc_agents:Information-flow control as deterministic defense against pr", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ms_ifc_agents", "relation": "informs", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:agentic/AB-05", "target": "clause:nist_ai_600_1:2.9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AB-05", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74) \u2014 safeguard robustness", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-05", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AB-05", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:agentic/AB-05", "target": "clause:owasp_llm10:LLM01:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AB-05", "target": "clause:salesforce_trust:Prompt defense", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AB-06", "target": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:agentic/AB-06", "target": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-06", "target": "clause:iso_31000:6.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_31000", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:agentic/AB-06", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AB-06", "target": "clause:microsoft_rai:RS1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AB-06", "target": "clause:mitre:AML.M0004", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-06", "target": "clause:nist_rmf:MANAGE 2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AB-06", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-06", "target": "clause:owasp_ai_exchange:limitresources", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:agentic/AB-06", "target": "clause:owasp_ai_exchange:ratelimit", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AB-07", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 ongoing monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-07", "target": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment; Part IV Phase 8 \u2014 Behavio", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AB-07", "target": "clause:aws_bedrock_guardrails:Content filters and contextual grounding checks \u2014 per-reques", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-07", "target": "clause:eu_ai_act:72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AB-07", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AB-07", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AB-07", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AB-07", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "direct" }, { "source": "control:agentic/AB-07", "target": "clause:mitre_atlas:AML.T0018", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:agentic/AB-07", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-07", "target": "clause:nist_ai_600_1:2.9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AB-07", "target": "clause:nist_rmf:MANAGE 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AB-07", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) \u2014 ongoing evaluation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-07", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AB-07", "target": "clause:salesforce_trust:Audit trail and toxicity detection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-08", "target": "clause:anthropic_rsp:Risk Reports (\u00a73)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-08", "target": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 per-request policy evaluation results", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AB-08", "target": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-08", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AB-08", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AB-08", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AB-08", "target": "clause:nist_rmf:GOVERN 4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AB-08", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-08", "target": "clause:salesforce_trust:Audit trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AB-09", "target": "clause:mitre:AML.M0009", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-09", "target": "clause:mitre:AML.M0010", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-09", "target": "clause:mitre:AML.M0015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AB-09", "target": "clause:owasp_ai_exchange:anomalousinputhandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AB-09", "target": "clause:owasp_ai_exchange:evasioninputhandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AB-09", "target": "clause:owasp_aisvs:C2.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AB-09", "target": "clause:owasp_aisvs:C2.1.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AB-09", "target": "clause:owasp_aisvs:C2.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AB-09", "target": "clause:owasp_aisvs:C2.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AB-09", "target": "clause:owasp_aisvs:C2.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AG-01", "target": "clause:anthropic_rsp:Governance (\u00a74)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-01", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AG-01", "target": "clause:eu_ai_act:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AG-01", "target": "clause:iso_42001:5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AG-01", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AG-01", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AG-01", "target": "clause:nist_rmf:GOVERN 2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AG-01", "target": "clause:openai_preparedness:Internal governance (\u00a75.1) \u2014 Safety Advisory Group", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-02", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards \u2014 pre-deployme", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-02", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (approval processes for ne", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AG-02", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AG-02", "target": "clause:iso_42001:8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AG-02", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "direct" }, { "source": "control:agentic/AG-02", "target": "clause:nist_rmf:MAP 5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AG-02", "target": "clause:openai_preparedness:Measuring capabilities (\u00a73) and Internal governance (\u00a75.1)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-03", "target": "clause:anthropic_rsp:Capability Thresholds (ASL framework)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-03", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (risk assessment procedure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AG-03", "target": "clause:cisa_ai_guidance:Line of Effort 2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_ai_guidance", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AG-03", "target": "clause:eu_ai_act:Annex III", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AG-03", "target": "clause:google_saif:Element 6 \u2014 Contextualize AI system risks in surrounding bus", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-03", "target": "clause:iso_31000:6.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_31000", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:agentic/AG-03", "target": "clause:iso_42001:6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AG-03", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AG-03", "target": "clause:nist_rmf:MAP 5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AG-03", "target": "clause:openai_preparedness:Tracked and Research Categories (\u00a72.2\u2013\u00a72.3) \u2014 capability ris", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-03", "target": "clause:owasp_aivss:AIVSS-AARS", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aivss", "relation": "equivalent_to", "source_version": "0.8" }, "confidence": "supporting" }, { "source": "control:agentic/AG-04", "target": "clause:anthropic_rsp:Governance (\u00a74)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-04", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:agentic/AG-04", "target": "clause:eu_ai_act:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AG-04", "target": "clause:iso_42001:5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AG-04", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AG-04", "target": "clause:nist_rmf:GOVERN 2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AG-04", "target": "clause:openai_preparedness:Internal governance (\u00a75.1)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-05", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 rapid response to misuse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-05", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (incident response procedu", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AG-05", "target": "clause:cisa_ai_guidance:Line of Effort 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_ai_guidance", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-05", "target": "clause:eu_ai_act:73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AG-05", "target": "clause:google_saif:Incident Response Management (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AG-05", "target": "clause:iso_42001:10.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AG-05", "target": "clause:microsoft_rai:RS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AG-05", "target": "clause:mitre_atlas:ATLAS tactics and techniques (framework-wide)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-05", "target": "clause:nist_rmf:MANAGE 4.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AG-06", "target": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Measure what matters (Dwell time and cover", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AG-06", "target": "clause:eu_ai_act:72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:agentic/AG-06", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AG-06", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AG-06", "target": "clause:nist_rmf:MEASURE 1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AG-07", "target": "clause:anthropic_rsp:Governance (\u00a74) \u2014 policy maintenance and updates", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-07", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Update policies based on", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:agentic/AG-07", "target": "clause:cisa_ai_guidance:Line of Effort 4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_ai_guidance", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-07", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AG-07", "target": "clause:iso_31000:6.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_31000", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:agentic/AG-07", "target": "clause:iso_42001:10.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AG-07", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AG-07", "target": "clause:nist_rmf:MANAGE 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AG-07", "target": "clause:openai_preparedness:Building trust (\u00a75) \u2014 framework iteration and transparency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-08", "target": "clause:anthropic_rsp:Risk Reports (\u00a73)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AG-08", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AG-08", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AG-08", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AG-08", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AG-08", "target": "clause:nist_rmf:GOVERN 4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AG-08", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a73\u2013\u00a74)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-01", "target": "clause:anthropic_zt_agents:Part III \u2014 Baseline establishment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AM-01", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AM-01", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AM-01", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AM-01", "target": "clause:microsoft_rai:T1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AM-01", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AM-01", "target": "clause:nist_rmf:MANAGE 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AM-01", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AM-01", "target": "clause:salesforce_trust:Audit trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AM-02", "target": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AM-02", "target": "clause:aws_bedrock_guardrails:Content filters \u2014 real-time policy screening", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-02", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AM-02", "target": "clause:microsoft_rai:RS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AM-02", "target": "clause:mitre_atlas:AML.T0051", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:agentic/AM-02", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AM-02", "target": "clause:nist_ai_600_1:2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AM-02", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-02", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:agentic/AM-02", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AM-02", "target": "clause:salesforce_trust:Toxicity detection \u2014 output scoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-03", "target": "clause:anthropic_rsp:Capability Thresholds \u2014 capability and behavior assessment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-03", "target": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Behavior (goal/behavioral drift); Part III", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AM-03", "target": "clause:aws_bedrock_guardrails:Contextual grounding checks", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:agentic/AM-03", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AM-03", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AM-03", "target": "clause:nist_rmf:MEASURE 2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AM-03", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Sandbagging and Long-range Auto", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-03", "target": "clause:salesforce_trust:Secure data retrieval and dynamic grounding", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-04", "target": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection (API call rates, data access vo", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AM-04", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-04", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AM-04", "target": "clause:iso_31000:6.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_31000", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:agentic/AM-04", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AM-04", "target": "clause:nist_rmf:MANAGE 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AM-04", "target": "clause:owasp_ai_exchange:limitresources", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AM-05", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AM-05", "target": "clause:aws_bedrock_guardrails:ApplyGuardrail API \u2014 content evaluation for arbitrary payloa", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-05", "target": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AM-05", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AM-05", "target": "clause:microsoft_rai:T1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AM-05", "target": "clause:mitre_atlas:AML.T0051", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:agentic/AM-05", "target": "clause:nist_ai_600_1:2.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AM-05", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-05", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AM-06", "target": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AM-06", "target": "clause:eu_ai_act:19", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AM-06", "target": "clause:eu_ai_act:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AM-06", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AM-06", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AM-06", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AM-06", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AM-06", "target": "clause:nist_rmf:GOVERN 4.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AM-06", "target": "clause:salesforce_trust:Audit trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-07", "target": "clause:anthropic_zt_agents:Part III \u2014 Automated response (session termination, credenti", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AM-07", "target": "clause:aws_bedrock_guardrails:Content filters \u2014 per-request blocking (no agent suspension)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-07", "target": "clause:eu_ai_act:73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:agentic/AM-07", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AM-07", "target": "clause:iso_42001:10.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AM-07", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "direct" }, { "source": "control:agentic/AM-07", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AM-07", "target": "clause:nist_rmf:MANAGE 4.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AM-07", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AM-08", "target": "clause:anthropic_rsp:Risk Reports (\u00a73)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-08", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AM-08", "target": "clause:google_saif:Element 5 \u2014 Adapt controls to adjust mitigations and create", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AM-08", "target": "clause:iso_31000:6.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_31000", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:agentic/AM-08", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AM-08", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AM-08", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AM-08", "target": "clause:nist_rmf:GOVERN 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AM-08", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AM-09", "target": "clause:eu_ai_act:14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AM-09", "target": "clause:nist_rmf:MEASURE 2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AO-01", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AO-01", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:agentic/AO-01", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AO-01", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AO-01", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AO-01", "target": "clause:nist_rmf:GOVERN 2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AO-01", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AO-01", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AO-02", "target": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AO-02", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:agentic/AO-02", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AO-02", "target": "clause:microsoft_rai:RS1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AO-02", "target": "clause:mitre:AML.M0026", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AO-02", "target": "clause:mitre:AML.M0027", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AO-02", "target": "clause:mitre:AML.M0028", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AO-02", "target": "clause:nist_rmf:\u00a73.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AO-02", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AO-02", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AO-02", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AO-03", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (authorization c", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:agentic/AO-03", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AO-03", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AO-03", "target": "clause:microsoft_rai:RS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AO-03", "target": "clause:mitre_atlas:AML.T0051", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:agentic/AO-03", "target": "clause:nist_ai_600_1:2.9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AO-03", "target": "clause:owasp_llm10:LLM01:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AO-04", "target": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AO-04", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AO-04", "target": "clause:eu_ai_act:14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AO-04", "target": "clause:google_saif:Agent User Control (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AO-04", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AO-04", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "direct" }, { "source": "control:agentic/AO-04", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AO-04", "target": "clause:mitre:AML.M0029", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AO-04", "target": "clause:mitre:AML.M0030", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AO-04", "target": "clause:ms_ifc_agents:Check before acting \u2014 policy engine may block an action or a", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ms_ifc_agents", "relation": "informs", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:agentic/AO-04", "target": "clause:nist_rmf:GOVERN 3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AO-04", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AO-04", "target": "clause:owasp_ai_exchange:oversight", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:agentic/AO-04", "target": "clause:owasp_aisvs:C9.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:agentic/AO-05", "target": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks (loop amplification)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:agentic/AO-05", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AO-05", "target": "clause:iso_31000:6.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_31000", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:agentic/AO-05", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AO-05", "target": "clause:microsoft_rai:RS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AO-05", "target": "clause:nist_rmf:\u00a73.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AO-05", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Autonomous Replication and Adap", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AO-05", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:agentic/AO-06", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 AI g", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:agentic/AO-06", "target": "clause:eu_ai_act:25", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AO-06", "target": "clause:eu_ai_act:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AO-06", "target": "clause:google_saif:Element 4 \u2014 Harmonize platform-level controls to ensure cons", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AO-06", "target": "clause:iso_31000:6.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_31000", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:agentic/AO-06", "target": "clause:iso_42001:4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AO-06", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AO-06", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AO-06", "target": "clause:nist_rmf:GOVERN 6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AO-07", "target": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Distributed tracing across multi-ag", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AO-07", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AO-07", "target": "clause:google_saif:Element 2 \u2014 Extend detection and response to bring AI into t", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AO-07", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AO-07", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AO-07", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AO-07", "target": "clause:nist_rmf:\u00a73.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AO-07", "target": "clause:salesforce_trust:Audit trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AO-08", "target": "clause:anthropic_rsp:Risk Reports (\u00a73)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AO-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AO-08", "target": "clause:iso_31000:6.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_31000", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:agentic/AO-08", "target": "clause:iso_42001:10.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AO-08", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AO-08", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AO-08", "target": "clause:nist_rmf:GOVERN 1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AO-08", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74) and Internal governance (\u00a75.1)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AT-01", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Tool allow-listing (explicit lists of perm", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AT-01", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AT-01", "target": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AT-01", "target": "clause:iso_42001:7.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AT-01", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AT-01", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AT-01", "target": "clause:mitre_atlas:AML.T0010", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:agentic/AT-01", "target": "clause:nist_rmf:GOVERN 1.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AT-01", "target": "clause:owasp_aisvs:C9.3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AT-01", "target": "clause:owasp_aisvs:C9.3.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AT-02", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Capability restrictions; Part IV Phase 3 \u2014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AT-02", "target": "clause:aws_bedrock_guardrails:Denied topics", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:agentic/AT-02", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AT-02", "target": "clause:google_saif:Agent Permissions (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AT-02", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AT-02", "target": "clause:microsoft_rai:RS1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AT-02", "target": "clause:mitre:AML.M0026", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AT-02", "target": "clause:mitre:AML.M0027", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AT-02", "target": "clause:mitre:AML.M0028", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AT-02", "target": "clause:nist_ai_600_1:2.9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AT-02", "target": "clause:nist_rmf:MANAGE 1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AT-02", "target": "clause:openai_preparedness:Research Categories (\u00a72.3) \u2014 Long-range Autonomy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AT-02", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:agentic/AT-02", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AT-03", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AT-03", "target": "clause:aws_bedrock_guardrails:Content filters \u2014 input screening", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:agentic/AT-03", "target": "clause:google_saif:Input Validation and Sanitization (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AT-03", "target": "clause:microsoft_rai:RS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AT-03", "target": "clause:mitre_atlas:AML.T0051", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:agentic/AT-03", "target": "clause:mitre:AML.M0015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AT-03", "target": "clause:nist_ai_600_1:2.9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AT-03", "target": "clause:owasp_ai_exchange:anomalousinputhandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AT-03", "target": "clause:owasp_llm10:LLM01:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AT-03", "target": "clause:owasp_llm10:LLM05:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AT-04", "target": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning; Part III \u2014 Input sanitization (tre", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:agentic/AT-04", "target": "clause:aws_bedrock_guardrails:Contextual grounding checks", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:agentic/AT-04", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AT-04", "target": "clause:microsoft_rai:RS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AT-04", "target": "clause:mitre_atlas:AML.T0051", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:agentic/AT-04", "target": "clause:mitre:AML.M0015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AT-04", "target": "clause:nist_ai_600_1:2.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AT-04", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AT-04", "target": "clause:owasp_llm10:LLM05:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AT-04", "target": "clause:salesforce_trust:Secure data retrieval, dynamic grounding, and toxicity detec", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AT-05", "target": "clause:anthropic_rsp:Required Safeguards \u2014 ASL-3 Deployment Standard", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AT-05", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 5 \u2014 Cap", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AT-05", "target": "clause:aws_bedrock_guardrails:Denied topics and content filters", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:agentic/AT-05", "target": "clause:eu_ai_act:14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AT-05", "target": "clause:google_saif:Agent User Control (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AT-05", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:agentic/AT-05", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "direct" }, { "source": "control:agentic/AT-05", "target": "clause:mitre:AML.M0026", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AT-05", "target": "clause:mitre:AML.M0027", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AT-05", "target": "clause:mitre:AML.M0028", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:agentic/AT-05", "target": "clause:nist_rmf:GOVERN 3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AT-05", "target": "clause:openai_preparedness:Safeguarding against severe harm (\u00a74)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:agentic/AT-05", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:agentic/AT-05", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:agentic/AT-06", "target": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part IV Phase 5 \u2014 Sand", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AT-06", "target": "clause:aws_bedrock_guardrails:Content filters applied to agent responses", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:agentic/AT-06", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AT-06", "target": "clause:google_saif:Element 1 \u2014 Expand strong security foundations to the AI eco", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AT-06", "target": "clause:iso_42001:A.10.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AT-06", "target": "clause:microsoft_rai:RS1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AT-06", "target": "clause:mitre_atlas:AML.T0010", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:agentic/AT-06", "target": "clause:nist_rmf:GOVERN 6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AT-07", "target": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Log all tool invocations)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:agentic/AT-07", "target": "clause:aws_bedrock_guardrails:Guardrail trace in agent invocation output", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_guardrails", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:agentic/AT-07", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AT-07", "target": "clause:google_saif:Agent Observability (SAIF control)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AT-07", "target": "clause:iso_31000:6.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_31000", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:agentic/AT-07", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AT-07", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AT-07", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AT-07", "target": "clause:nist_ai_600_1:2.9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:agentic/AT-07", "target": "clause:nist_rmf:MANAGE 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AT-07", "target": "clause:salesforce_trust:Audit trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "salesforce_trust", "relation": "informs", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AT-08", "target": "clause:anthropic_rsp:Risk Reports (\u00a73.1 Scope and Timing) \u2014 recurring evidence ca", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:agentic/AT-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AT-08", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:agentic/AT-08", "target": "clause:google_saif:Element 3 \u2014 Automate defenses to keep pace with existing and", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:agentic/AT-08", "target": "clause:iso_31000:6.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_31000", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:agentic/AT-08", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:agentic/AT-08", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AT-08", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:agentic/AT-08", "target": "clause:nist_rmf:GOVERN 1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:agentic/AT-08", "target": "clause:openai_preparedness:Safeguards Reports (\u00a74)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:authority/PA-01", "target": "clause:aws_organizations:AWS IAM Permission Boundaries \u2014 Delegation Scope Enforcement", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-01", "target": "clause:coso_erm:Principle 2 \u2014 Establishes Operating Structures", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-01", "target": "clause:google_org_policy:Google Cloud IAM Resource Hierarchy \u2014 Inherited Authority Li", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-01", "target": "clause:iso_37301:\u00a7 7.2 \u2014 Competence", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PA-01", "target": "clause:iso_42001:5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-01", "target": "clause:microsoft_rai:Azure RBAC \u2014 Authority Delegation Hierarchy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-01", "target": "clause:nist_800_53:AC-5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-01", "target": "clause:okta_authz:Okta Authorization Server \u2014 OAuth 2.0 Delegation Constraints", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-02", "target": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 Approval Limit Control", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-02", "target": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-02", "target": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Approval-Gated Elev", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-02", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-02", "target": "clause:microsoft_rai:Azure Policy Custom Definitions \u2014 AI Action Approval Thresho", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-02", "target": "clause:nist_800_53:AC-5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PA-02", "target": "clause:nist_rmf:GOVERN 1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-02", "target": "clause:okta_authz:Okta Authorization Server \u2014 Time-Bounded Approval-Scoped Tok", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-03", "target": "clause:aws_organizations:AWS Control Tower Detective Controls \u2014 Policy Violation Esca", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-03", "target": "clause:coso_erm:Principle 15 \u2014 Assesses Substantial Change", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PA-03", "target": "clause:google_org_policy:Google Cloud Privileged Access Manager \u2014 Multi-Level Approva", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-03", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-03", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-03", "target": "clause:nist_800_53:IR-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PA-03", "target": "clause:nist_rmf:MANAGE 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-03", "target": "clause:okta_authz:Okta Workflows \u2014 Automated Escalation Gate Enforcement", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-04", "target": "clause:aws_organizations:AWS CloudTrail \u2014 Principal Accountability Binding for All AP", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-04", "target": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PA-04", "target": "clause:eu_ai_act:25", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-04", "target": "clause:eu_ai_act:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-04", "target": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Non-Repudiable Principal Binding", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-04", "target": "clause:iso_42001:5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PA-04", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Principal Accountability for AI Ac", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-04", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_cg", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:authority/PA-04", "target": "clause:okta_authz:Okta Identity Tokens \u2014 Principal Identity Binding for AI Age", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-05", "target": "clause:aws_organizations:AWS Resource Access Manager \u2014 Cross-Account Share Acceptance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PA-05", "target": "clause:coso_erm:Principle 7 \u2014 Defines Risk Appetite", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PA-05", "target": "clause:google_org_policy:Google Cloud PAM Multi-Level Approval \u2014 Dual-Authorization W", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-05", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-05", "target": "clause:microsoft_rai:Azure DevOps Required Reviewers \u2014 Multi-Party AI Deployment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-05", "target": "clause:nist_800_53:AC-5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PA-05", "target": "clause:okta_authz:Okta Workflows \u2014 Multi-Party Token Approval Chains", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-06", "target": "clause:aws_organizations:AWS Break-Glass Account Procedure \u2014 SCP Exception with Full", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-06", "target": "clause:google_org_policy:Google Cloud PAM Emergency Access \u2014 Justified Time-Bounded B", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-06", "target": "clause:iso_37301:\u00a7 4.6 \u2014 Compliance risk assessment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PA-06", "target": "clause:microsoft_rai:Azure PIM Emergency Access \u2014 Governed Break-Glass Activation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-06", "target": "clause:nist_800_53:IR-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-06", "target": "clause:nist_rmf:MANAGE 4.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-06", "target": "clause:okta_authz:Okta Privileged Access + Okta Workflows \u2014 Emergency Override", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-07", "target": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Tamper-Evident Approval Rec", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-07", "target": "clause:coso_erm:Principle 13 \u2014 Implements Risk Responses", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PA-07", "target": "clause:google_org_policy:Google Cloud Audit Logs \u2014 Immutable Approval Event Records", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-07", "target": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-07", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Unified AI Authorization Audit Tra", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-07", "target": "clause:nist_800_53:AU-12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PA-07", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Authorization Decision Reco", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-07", "target": "clause:soc2:CC7.2 \u2014 The entity monitors system components for anomalies", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PA-08", "target": "clause:aws_organizations:AWS CloudTrail + EventBridge \u2014 SCP and IAM Policy Change Det", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-08", "target": "clause:google_org_policy:Google Cloud Asset Inventory + Pub/Sub \u2014 Real-Time Policy Ch", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-08", "target": "clause:iso_37301:\u00a7 6.3 \u2014 Planning of changes", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-08", "target": "clause:iso_42001:6.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-08", "target": "clause:microsoft_rai:Azure Event Grid \u2014 AI Governance Policy Change Alerts", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-08", "target": "clause:nist_rmf:GOVERN 1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-08", "target": "clause:okta_authz:Okta Event Hooks \u2014 Authorization Policy Change Notifications", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PA-09", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:authority/PA-09", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:authority/PA-09", "target": "clause:nist_rmf:GOVERN 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:authority/PE-01", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Documented Capability and Safeguards Assessments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:authority/PE-01", "target": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Evidence Archive", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-01", "target": "clause:iso_37301:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-01", "target": "clause:iso_42001:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-01", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-01", "target": "clause:nist_800_53:AU-11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PE-01", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Documented Evalu", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:authority/PE-02", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance and Transparency (Public Disclosures)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:authority/PE-02", "target": "clause:aws_organizations:AWS Artifact \u2014 On-Demand Regulatory Compliance Disclosure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PE-02", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-02", "target": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report + Purview \u2014 Dis", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-02", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_cg", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:authority/PE-02", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Disclosure and G", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:authority/PE-02", "target": "clause:soc2:CC2.3 / CC7.4 \u2014 External communication and incident response", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-03", "target": "clause:aws_organizations:AWS Audit Manager \u2014 Internal Audit Evidence Package Generati", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-03", "target": "clause:google_org_policy:Google Cloud Audit Logs + Policy Analyzer \u2014 Internal Audit E", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-03", "target": "clause:iso_37301:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PE-03", "target": "clause:iso_42001:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PE-03", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Structured Internal A", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-03", "target": "clause:nist_800_53:CA-7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PE-03", "target": "clause:okta_authz:Okta System Log Compliance Reports \u2014 Authorization Audit Evi", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-03", "target": "clause:soc2:CC4.1 \u2014 COSO Principle 16 \u2014 ongoing and/or separate evaluati", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-04", "target": "clause:aws_organizations:AWS Security Hub \u2014 Cross-Domain Policy Evidence Normalizatio", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-04", "target": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Cross-Domain Evidence", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-04", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PE-04", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PE-04", "target": "clause:microsoft_rai:Microsoft Defender for Cloud + Purview \u2014 Cross-Domain Policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-04", "target": "clause:nist_rmf:GOVERN 4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-05", "target": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Immutable Contract Audit Tr", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-05", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-05", "target": "clause:microsoft_rai:Microsoft Purview Audit \u2014 Contract Obligation Audit Trail Re", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-05", "target": "clause:nist_800_53:AU-12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PE-05", "target": "clause:okta_authz:Okta System Log \u2014 Non-Repudiable Contract Authorization Evid", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-05", "target": "clause:soc2:CC7.2 \u2014 Monitoring of system components", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PE-06", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Governance (Responsible Scaling Officer and Board", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "supporting" }, { "source": "control:authority/PE-06", "target": "clause:aws_organizations:AWS Audit Manager Custom Frameworks \u2014 Board-Ready Governance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-06", "target": "clause:coso_erm:Principle 1 \u2014 Exercises Board Risk Oversight", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-06", "target": "clause:microsoft_rai:Microsoft RAI Transparency Report \u2014 Board Governance Disclos", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "supporting" }, { "source": "control:authority/PE-06", "target": "clause:oecd_cg:IV \u2014 Disclosure and transparency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_cg", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:authority/PE-06", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "supporting" }, { "source": "control:authority/PE-06", "target": "clause:soc2:CC2.3 \u2014 Communicates with external parties", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PE-07", "target": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PE-07", "target": "clause:google_org_policy:Google Cloud Custom Org Policy \u2014 Governance Program Coverage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-07", "target": "clause:iso_37301:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-07", "target": "clause:iso_42001:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-07", "target": "clause:microsoft_rai:Microsoft RAI Red Team Operations \u2014 Independent Program Asse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "supporting" }, { "source": "control:authority/PE-07", "target": "clause:nist_rmf:MANAGE 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PE-07", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "supporting" }, { "source": "control:authority/PE-08", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:authority/PE-08", "target": "clause:aws_organizations:AWS Audit Manager \u2014 Automated Policy Attestation Artifact Ge", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-08", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PE-08", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PE-08", "target": "clause:nist_rmf:GOVERN 1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PE-08", "target": "clause:okta_authz:Okta Authorization Server \u2014 Signed Token Claims as Authoriza", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PE-08", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 System Cards and Safeguards Repo", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:authority/PE-08", "target": "clause:soc2:CC3.1 \u2014 COSO Principle 6 \u2014 Specifies suitable objectives", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PG-01", "target": "clause:aws_organizations:AWS Config + Security Hub \u2014 Continuous Policy Adherence Moni", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-01", "target": "clause:coso_erm:Principle 9 \u2014 Formulates business objectives", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PG-01", "target": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies + Policy Sim", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-01", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PG-01", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PG-01", "target": "clause:microsoft_rai:Azure Policy Compliance Dashboard \u2014 AI Workload Policy Adher", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-01", "target": "clause:nist_rmf:MEASURE 3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-01", "target": "clause:okta_authz:Okta System Log \u2014 Authorization Policy Adherence Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-02", "target": "clause:aws_organizations:AWS Config Rules + CloudTrail Alerting \u2014 Authority Limit Vio", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-02", "target": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-02", "target": "clause:google_org_policy:Google Cloud Organization Policy Monitoring \u2014 Authority Boun", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-02", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PG-02", "target": "clause:microsoft_rai:Microsoft Defender for Cloud \u2014 AI Workload Posture and Threa", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PG-02", "target": "clause:nist_800_53:AU-6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-02", "target": "clause:nist_rmf:MEASURE 3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-02", "target": "clause:okta_authz:Okta System Log + Identity Governance Reports \u2014 Authority Li", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-03", "target": "clause:aws_organizations:AWS Audit Manager \u2014 Contract Compliance Evidence Collection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-03", "target": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-03", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Continuous Regulatory Contract Co", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-03", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PG-03", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Regulatory Template C", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-03", "target": "clause:nist_800_53:SA-9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-04", "target": "clause:aws_organizations:AWS Security Hub \u2014 Policy Incident Classification and Routin", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-04", "target": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-04", "target": "clause:google_org_policy:Google Cloud Security Command Center \u2014 Policy Violation Tria", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-04", "target": "clause:iso_37301:8.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-04", "target": "clause:microsoft_rai:Microsoft Sentinel \u2014 AI Policy Incident Classification and S", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-04", "target": "clause:nist_800_53:IR-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PG-04", "target": "clause:nist_rmf:MANAGE 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-05", "target": "clause:aws_organizations:AWS Config \u2014 Knowledge Resource Configuration Drift Detectio", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-05", "target": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Change Det", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-05", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-05", "target": "clause:microsoft_rai:Azure Machine Learning Model Monitoring \u2014 Knowledge Source S", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-05", "target": "clause:nist_800_53:CM-3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PG-05", "target": "clause:nist_rmf:MEASURE 2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-06", "target": "clause:aws_organizations:CloudTrail + AWS GuardDuty \u2014 Behavioral Anomaly Detection fo", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-06", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PG-06", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PG-06", "target": "clause:microsoft_rai:Azure AI Foundry Observability \u2014 Operating Intent Drift Moni", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-06", "target": "clause:nist_800_53:SI-7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PG-06", "target": "clause:nist_rmf:MEASURE 2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PG-06", "target": "clause:okta_authz:Okta Behavior Detection + System Log \u2014 Sign-In Anomaly Signa", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PG-07", "target": "clause:aws_organizations:AWS Security Hub + Audit Manager \u2014 Policy Governance Reports", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-07", "target": "clause:coso_erm:Principle 18 \u2014 Leverages information and technology", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PG-07", "target": "clause:google_org_policy:Google Cloud Organization Policy + Cloud Asset Inventory \u2014 G", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-07", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-07", "target": "clause:microsoft_rai:Microsoft Purview + Azure Policy Compliance Reports \u2014 AI Gov", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-07", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (oversight, acc", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_cg", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:authority/PG-08", "target": "clause:aws_organizations:AWS Security Hub Findings History \u2014 Policy Improvement Input", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-08", "target": "clause:coso_erm:Principle 20 \u2014 Reports on risk, culture, and performance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PG-08", "target": "clause:google_org_policy:Google Cloud IAM Recommender \u2014 Least-Privilege Policy Improv", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-08", "target": "clause:iso_37301:10.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PG-08", "target": "clause:iso_42001:10.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PG-08", "target": "clause:microsoft_rai:Microsoft Responsible AI Transparency Report \u2014 Systematic Le", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "supporting" }, { "source": "control:authority/PG-08", "target": "clause:nist_rmf:MANAGE 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PG-09", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:authority/PG-09", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:authority/PG-09", "target": "clause:nist_rmf:GOVERN 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:authority/PO-01", "target": "clause:aws_organizations:AWS Control Tower Landing Zone \u2014 Centralized Policy Registry", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-01", "target": "clause:google_org_policy:Google Cloud Organization Policy Service \u2014 Centralized Machi", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-01", "target": "clause:iso_37301:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-01", "target": "clause:iso_42001:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-01", "target": "clause:microsoft_rai:Azure Policy Initiative Assignments \u2014 AI Policy Register Imp", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-01", "target": "clause:nist_800_53:PL-1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-01", "target": "clause:nist_rmf:GOVERN 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-01", "target": "clause:opa_rego:OPA Policy Language documentation (Rego)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "opa_rego", "relation": "informs", "source_version": "0.68" }, "confidence": "direct" }, { "source": "control:authority/PO-02", "target": "clause:aws_organizations:AWS Organizations + CloudTrail \u2014 SCP Change History and IaC-", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-02", "target": "clause:google_org_policy:Google Cloud Organization Policy Dry-Run \u2014 Safe Policy Versi", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-02", "target": "clause:iso_37301:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-02", "target": "clause:iso_42001:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-02", "target": "clause:microsoft_rai:Azure Resource Manager Policy Versioning \u2014 Automated Policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-02", "target": "clause:nist_800_53:CM-3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-02", "target": "clause:nist_rmf:GOVERN 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-03", "target": "clause:aws_organizations:AWS Artifact \u2014 Compliance Documentation for Contractual Obli", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PO-03", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Regulatory Obligation Constraint", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-03", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-03", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-03", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PO-03", "target": "clause:nist_800_53:SA-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-03", "target": "clause:nist_rmf:MAP 1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-04", "target": "clause:aws_organizations:AWS Config \u2014 Contractual Requirement Conflict Detection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PO-04", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Sovereign Compliance Conflict Det", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PO-04", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-04", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-04", "target": "clause:microsoft_rai:Microsoft Purview Compliance Solutions \u2014 Contractual Conflic", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PO-04", "target": "clause:nist_800_53:SA-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-04", "target": "clause:nist_rmf:MAP 1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-05", "target": "clause:aws_organizations:AWS Organizations SCP + Amazon Macie \u2014 Data Use Policy Enfor", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-05", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-05", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Data Sovereignty and Use Restrict", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-05", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-05", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-05", "target": "clause:microsoft_rai:Azure Policy + Microsoft Purview Data Governance \u2014 Automated", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-05", "target": "clause:nist_800_53:AC-23", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PO-06", "target": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Operator Sc", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:authority/PO-06", "target": "clause:aws_organizations:AWS SCP \u2014 AI Agent External Communication Service Restrictio", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-06", "target": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PO-06", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-06", "target": "clause:nist_800_53:AC-5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PO-06", "target": "clause:nist_rmf:GOVERN 2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-06", "target": "clause:openai_preparedness:OpenAI Usage Policies \u2014 Permitted Use and Representation Gov", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:authority/PO-07", "target": "clause:aws_organizations:AWS Control Tower + Marketplace Governance \u2014 Third-Party Pol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-07", "target": "clause:google_org_policy:Google Cloud Org Policy \u2014 Third-Party Integration Restrictio", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-07", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-07", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-07", "target": "clause:nist_800_53:SA-9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-07", "target": "clause:oecd_cg:II.F / IV.A \u2014 Related party transactions \u2014 approval and disc", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_cg", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:authority/PO-08", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Required Safeguards as Blocking Conditions", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:authority/PO-08", "target": "clause:coso_erm:Principle 10 \u2014 Identifies Risk", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-08", "target": "clause:google_org_policy:Google Cloud Asset Inventory AnalyzeOrgPolicies \u2014 Constraint", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-08", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-08", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-08", "target": "clause:nist_800_53:CA-7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PO-09", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:authority/PO-09", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:authority/PO-09", "target": "clause:nist_rmf:GOVERN 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:authority/PR-01", "target": "clause:aws_organizations:AWS Marketplace + Control Tower \u2014 Procurement Policy Integra", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-01", "target": "clause:coso_erm:Principle 15 \u2014 Assesses substantial change", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-01", "target": "clause:google_org_policy:Google Cloud Marketplace + Org Policy \u2014 Approved AI Service", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-01", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-01", "target": "clause:nist_800_53:SA-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-01", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_cg", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:authority/PR-02", "target": "clause:aws_organizations:AWS Organizations SCP + AWS Budgets \u2014 AI-Initiated Financial", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-02", "target": "clause:coso_erm:Principle 7 \u2014 Defines risk appetite", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-02", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-02", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Resource Provisioning Commitment Approval", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-02", "target": "clause:nist_800_53:AC-5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-02", "target": "clause:nist_rmf:GOVERN 2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-02", "target": "clause:okta_authz:Okta Authorization Server \u2014 Commitment-Scoped Token Restrict", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-03", "target": "clause:aws_organizations:AWS Marketplace + Partner Network \u2014 Vendor Qualification Fra", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-03", "target": "clause:google_org_policy:Google Assured Workloads \u2014 Compliance-Certified Service Rest", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-03", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-03", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-03", "target": "clause:nist_800_53:SA-9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-03", "target": "clause:oecd_cg:V.D \u2014 Board responsibilities \u2014 key functions (risk managemen", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_cg", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:authority/PR-04", "target": "clause:aws_organizations:AWS Artifact \u2014 Contract Review Gate Documentation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PR-04", "target": "clause:google_org_policy:Google Cloud Security Foundations Blueprint \u2014 Pre-Deployment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-04", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-04", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-04", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-04", "target": "clause:nist_800_53:SA-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-04", "target": "clause:nist_rmf:GOVERN 2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-05", "target": "clause:aws_organizations:AWS Service Level Agreements + CloudWatch \u2014 SLA Governance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PR-05", "target": "clause:google_org_policy:Google Cloud SLA Terms + Assured Workloads \u2014 Commitment Enfo", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PR-05", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-05", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-05", "target": "clause:microsoft_rai:Azure SLA + Azure Monitor \u2014 SLA Commitment Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PR-05", "target": "clause:nist_800_53:SA-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-05", "target": "clause:soc2:A1.1 \u2014 Capacity management and monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PR-06", "target": "clause:anthropic_rsp:Anthropic Usage Policy + Claude's Constitution \u2014 Human Overs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:authority/PR-06", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-06", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-06", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-06", "target": "clause:nist_800_53:SA-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-06", "target": "clause:nist_rmf:GOVERN 2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-07", "target": "clause:aws_organizations:AWS Config Continuous Compliance \u2014 Contract Obligation Monit", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-07", "target": "clause:coso_erm:Principle 13 \u2014 Implements risk responses", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-07", "target": "clause:google_org_policy:Google Cloud Asset Inventory + Organization Policy \u2014 Ongoing", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-07", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PR-07", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PR-07", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 Custom Assessments fo", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-07", "target": "clause:nist_800_53:SA-9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-08", "target": "clause:aws_organizations:AWS CloudTrail + Audit Manager \u2014 Procurement Audit Trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-08", "target": "clause:google_org_policy:Google Cloud Admin Activity Audit Logs \u2014 Procurement Event R", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-08", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-08", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-08", "target": "clause:nist_800_53:AU-12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PR-08", "target": "clause:okta_authz:Okta System Log \u2014 Identity-Mediated Procurement Authorizatio", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PR-08", "target": "clause:soc2:CC7.2 \u2014 Detection and Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PR-09", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:authority/PR-09", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:authority/PR-09", "target": "clause:nist_rmf:GOVERN 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:authority/PV-01", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Thresholds and Required Safeguards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:authority/PV-01", "target": "clause:aws_organizations:AWS Organizations SCP Design \u2014 Scope Boundary Enforcement", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-01", "target": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PV-01", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-01", "target": "clause:iso_42001:6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PV-01", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-01", "target": "clause:nist_rmf:GOVERN 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-01", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Tracked Categories and Deploymen", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:authority/PV-02", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 ASL-3 Deployment Standard (Misuse Safeguards and", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:authority/PV-02", "target": "clause:aws_organizations:Amazon Bedrock Policies \u2014 Organization-Level Guardrail Enfor", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-02", "target": "clause:coso_erm:Principle 11 \u2014 Assesses Severity of Risk", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PV-02", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-02", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Resource Constraint Enfor", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-02", "target": "clause:iso_42001:6.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-02", "target": "clause:iso_42001:8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-02", "target": "clause:microsoft_rai:Azure Policy \u2014 AI Model Deployment Restriction and Content S", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-02", "target": "clause:nist_rmf:MAP 1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-03", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Capability Assessment (Periodic Re-Evaluation)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:authority/PV-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-03", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Managed Constraint Compli", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-03", "target": "clause:iso_37301:\u00a7 9.1 \u2014 Monitoring, measurement, analysis and evaluation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PV-03", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PV-03", "target": "clause:microsoft_rai:A3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-03", "target": "clause:nist_rmf:GOVERN 2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-03", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Building Trust (Ongoing Evaluati", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:authority/PV-04", "target": "clause:aws_organizations:AWS Organizations SCP \u2014 Approved Data Source Restriction", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-04", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Service Usage Restriction", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-04", "target": "clause:iso_37301:\u00a7 8.1 \u2014 Operational planning and control", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-04", "target": "clause:iso_42001:A.7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-04", "target": "clause:microsoft_rai:Microsoft Purview \u2014 Data Governance for AI Knowledge Sources", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-04", "target": "clause:nist_rmf:MAP 2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-04", "target": "clause:okta_authz:Okta Fine-Grained Authorization \u2014 Knowledge Resource Access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-05", "target": "clause:aws_organizations:AWS Config \u2014 Configuration Drift Detection for Knowledge Res", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-05", "target": "clause:google_org_policy:Google Cloud Asset Inventory \u2014 Knowledge Resource Version Mo", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-05", "target": "clause:iso_42001:A.7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-05", "target": "clause:microsoft_rai:Azure Machine Learning \u2014 Model and Data Version Tracking", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-05", "target": "clause:nist_800_53:CM-3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-05", "target": "clause:nist_rmf:MAP 2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-06", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Re-Assessment Triggers on Material Change", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:authority/PV-06", "target": "clause:aws_organizations:AWS Control Tower Proactive Controls \u2014 Change Governance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-06", "target": "clause:coso_erm:Principle 17 \u2014 Pursues Improvement in Enterprise Risk Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PV-06", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-06", "target": "clause:google_org_policy:Google Cloud Organization Policy \u2014 Policy Simulation for Con", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-06", "target": "clause:iso_42001:6.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-06", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-06", "target": "clause:nist_rmf:GOVERN 1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-07", "target": "clause:anthropic_rsp:RSP v3.3 \u2014 Safeguards Assessment and Risk Report Sign-Off", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:authority/PV-07", "target": "clause:aws_organizations:AWS Audit Manager \u2014 Deployment Scope Evidence Collection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_organizations", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-07", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-07", "target": "clause:iso_42001:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-07", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-07", "target": "clause:nist_rmf:GOVERN 1.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PV-07", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Safety Advisory Group Review and", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:authority/PV-08", "target": "clause:anthropic_rsp:Claude's Constitution + Anthropic Usage Policy \u2014 Acting With", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:authority/PV-08", "target": "clause:google_org_policy:Google Gemini Enterprise Agent Platform \u2014 Agent Access Contr", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_org_policy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-08", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PV-08", "target": "clause:nist_800_53:SI-7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:authority/PV-08", "target": "clause:nist_rmf:MEASURE 2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:authority/PV-08", "target": "clause:okta_authz:Okta for AI Agents \u2014 Scoped Token Authorization", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_authz", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:authority/PV-08", "target": "clause:openai_preparedness:Preparedness Framework v2 \u2014 Research Categories (Long-Range", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "supporting" }, { "source": "control:authority/PV-09", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:authority/PV-09", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:authority/PV-09", "target": "clause:nist_rmf:GOVERN 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:compliance/AU-01", "target": "clause:aws_artifact:Compliance report access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-01", "target": "clause:cobit_2019:MEA02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/AU-01", "target": "clause:coso_erm:Principle 16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/AU-01", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-01", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/AU-01", "target": "clause:google_compliance:Compliance report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-01", "target": "clause:iso_37301:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/AU-01", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/AU-01", "target": "clause:soc2:CC4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/AU-02", "target": "clause:anthropic_rsp:Capability Report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/AU-02", "target": "clause:aws_artifact:Third-party audit report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-02", "target": "clause:cobit_2019:APO11.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/AU-02", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-02", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/AU-02", "target": "clause:google_compliance:Certification documentation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-02", "target": "clause:iso_27001:A.5.33", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27001", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:compliance/AU-02", "target": "clause:iso_37301:7.5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/AU-02", "target": "clause:microsoft_compliance:Control mapping", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-02", "target": "clause:okta_governance:Audit reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-02", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-02", "target": "clause:soc2:CC2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/AU-03", "target": "clause:aws_artifact:Artifact agreement", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/AU-03", "target": "clause:cobit_2019:MEA03.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/AU-03", "target": "clause:eu_ai_act:74", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/AU-03", "target": "clause:gdpr:31", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/AU-03", "target": "clause:iso_37301:9.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:compliance/AU-03", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/AU-03", "target": "clause:okta_governance:Access Requests", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-03", "target": "clause:soc2:CC2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/AU-04", "target": "clause:aws_artifact:Third-party audit report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-04", "target": "clause:cobit_2019:DSS06.03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/AU-04", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/AU-04", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:compliance/AU-04", "target": "clause:google_compliance:Shared responsibility matrix", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-04", "target": "clause:iso_27001:A.8.15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27001", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:compliance/AU-04", "target": "clause:microsoft_compliance:Compliance Score", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/AU-04", "target": "clause:nist_csf:PR.DS-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:compliance/AU-04", "target": "clause:okta_governance:Audit reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-04", "target": "clause:soc2:CC7.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/AU-05", "target": "clause:anthropic_rsp:Required Safeguards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:compliance/AU-05", "target": "clause:aws_artifact:Compliance report access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-05", "target": "clause:cobit_2019:MEA03.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/AU-05", "target": "clause:coso_erm:Principle 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/AU-05", "target": "clause:eu_ai_act:74", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/AU-05", "target": "clause:gdpr:31", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/AU-05", "target": "clause:iso_37301:10.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/AU-05", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-05", "target": "clause:openai_policies:Trust Portal", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/AU-06", "target": "clause:cobit_2019:MEA02.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/AU-06", "target": "clause:coso_erm:Principle 17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/AU-06", "target": "clause:eu_ai_act:20", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-06", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-06", "target": "clause:gdpr:25", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "adjacent" }, { "source": "control:compliance/AU-06", "target": "clause:iso_37301:10.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/AU-06", "target": "clause:microsoft_compliance:Improvement Action", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/AU-06", "target": "clause:okta_governance:Access certification", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-06", "target": "clause:soc2:CC4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/AU-07", "target": "clause:anthropic_rsp:Capability assessment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:compliance/AU-07", "target": "clause:aws_artifact:Compliance report access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-07", "target": "clause:cobit_2019:APO02.06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/AU-07", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/AU-07", "target": "clause:google_compliance:Shared responsibility matrix", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-07", "target": "clause:iso_37301:4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/AU-07", "target": "clause:microsoft_compliance:Improvement Actions", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/AU-07", "target": "clause:nist_csf:GV.OC-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:compliance/AU-07", "target": "clause:okta_governance:Audit reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-07", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/AU-07", "target": "clause:soc2:CC1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/AU-08", "target": "clause:anthropic_rsp:Capability Report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:compliance/AU-08", "target": "clause:aws_artifact:Compliance Reports", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/AU-08", "target": "clause:cobit_2019:MEA03.03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/AU-08", "target": "clause:coso_erm:Principle 20", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/AU-08", "target": "clause:eu_ai_act:43", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/AU-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/AU-08", "target": "clause:google_compliance:Compliance report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-08", "target": "clause:iso_37301:9.1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/AU-08", "target": "clause:microsoft_compliance:Compliance Score", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-08", "target": "clause:okta_governance:Audit reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/AU-08", "target": "clause:openai_policies:Trust Portal", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/AU-08", "target": "clause:soc2:CC2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/CA-01", "target": "clause:anthropic_rsp:Capability Thresholds", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/CA-01", "target": "clause:aws_artifact:AWS security posture documentation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-01", "target": "clause:cobit_2019:BAI02.01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/CA-01", "target": "clause:coso_erm:Component 2: Objective Setting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-01", "target": "clause:csa_ai_caiq:GRC-07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_ai_caiq", "relation": "equivalent_to", "source_version": "1.1.0" }, "confidence": "direct" }, { "source": "control:compliance/CA-01", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:compliance/CA-01", "target": "clause:gdpr:35", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:compliance/CA-01", "target": "clause:google_compliance:Shared responsibility matrix", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-01", "target": "clause:iso_37301:4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CA-01", "target": "clause:iso_42001:4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:compliance/CA-01", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-01", "target": "clause:openai_policies:Usage Policies", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-02", "target": "clause:anthropic_rsp:Required Safeguards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-02", "target": "clause:aws_artifact:Third-party audit report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-02", "target": "clause:cobit_2019:MEA03.01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CA-02", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-02", "target": "clause:google_compliance:Regulatory guidance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-02", "target": "clause:iso_37301:6.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CA-02", "target": "clause:microsoft_compliance:Control mapping", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CA-02", "target": "clause:nist_csf:GV.PO-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:compliance/CA-02", "target": "clause:openai_policies:Trust Portal", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-02", "target": "clause:soc2:CC1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CA-03", "target": "clause:anthropic_rsp:Capability assessment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-03", "target": "clause:cobit_2019:MEA03.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CA-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:compliance/CA-03", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "partial" }, { "source": "control:compliance/CA-03", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CA-03", "target": "clause:microsoft_compliance:Improvement Action", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-03", "target": "clause:okta_governance:Audit reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-03", "target": "clause:soc2:CC4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CA-04", "target": "clause:anthropic_rsp:Capability Thresholds", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "direct" }, { "source": "control:compliance/CA-04", "target": "clause:aws_artifact:AWS security posture documentation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-04", "target": "clause:cobit_2019:BAI03.02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/CA-04", "target": "clause:coso_erm:Principle 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-04", "target": "clause:eu_ai_act:6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:compliance/CA-04", "target": "clause:gdpr:25", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:compliance/CA-04", "target": "clause:google_compliance:Shared responsibility matrix", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-04", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:compliance/CA-04", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CA-04", "target": "clause:openai_policies:Usage Policies", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-05", "target": "clause:anthropic_rsp:Capability Thresholds", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/CA-05", "target": "clause:aws_artifact:Compliance report access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-05", "target": "clause:cobit_2019:MEA03.02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CA-05", "target": "clause:eu_ai_act:43", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:compliance/CA-05", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-05", "target": "clause:google_compliance:Regulatory guidance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-05", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CA-05", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CA-05", "target": "clause:nist_csf:GV.OC-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:compliance/CA-05", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-06", "target": "clause:anthropic_rsp:Capability assessment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-06", "target": "clause:cobit_2019:MEA03.03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CA-06", "target": "clause:coso_erm:Principle 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CA-06", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-06", "target": "clause:iso_37301:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CA-06", "target": "clause:microsoft_compliance:Improvement Action", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CA-06", "target": "clause:nist_csf:ID.RA-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-06", "target": "clause:okta_governance:Access certification", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-06", "target": "clause:soc2:CC4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CA-07", "target": "clause:anthropic_rsp:ASL-3 Security Standard", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "direct" }, { "source": "control:compliance/CA-07", "target": "clause:aws_artifact:Third-party audit report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CA-07", "target": "clause:cobit_2019:APO10.03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CA-07", "target": "clause:eu_ai_act:23", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:compliance/CA-07", "target": "clause:gdpr:28", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:compliance/CA-07", "target": "clause:google_compliance:Certification documentation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CA-07", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CA-07", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-07", "target": "clause:okta_governance:Entitlement Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-07", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CA-07", "target": "clause:soc2:CC9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CA-08", "target": "clause:anthropic_rsp:Capability Report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/CA-08", "target": "clause:aws_artifact:Compliance report access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-08", "target": "clause:cobit_2019:MEA01.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CA-08", "target": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "adjacent" }, { "source": "control:compliance/CA-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:compliance/CA-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "partial" }, { "source": "control:compliance/CA-08", "target": "clause:google_compliance:Certification documentation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-08", "target": "clause:iso_37301:10.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CA-08", "target": "clause:microsoft_compliance:Compliance Score", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-08", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CA-08", "target": "clause:soc2:CC5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CG-01", "target": "clause:anthropic_rsp:Responsible Scaling Officer", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:compliance/CG-01", "target": "clause:cobit_2019:APO01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CG-01", "target": "clause:coso_erm:Component 1 \u2014 Governance and Culture", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/CG-01", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-01", "target": "clause:gdpr:24", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/CG-01", "target": "clause:iso_37301:5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CG-01", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-01", "target": "clause:okta_governance:Entitlement Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-01", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/CG-02", "target": "clause:anthropic_rsp:Required Safeguards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "direct" }, { "source": "control:compliance/CG-02", "target": "clause:aws_artifact:Compliance report access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-02", "target": "clause:coso_erm:Component 2 \u2014 Strategy and Objective-Setting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CG-02", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-02", "target": "clause:gdpr:24", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/CG-02", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/CG-02", "target": "clause:google_compliance:Shared responsibility matrix", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-02", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CG-02", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-02", "target": "clause:nist_csf:GV.OC-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:compliance/CG-02", "target": "clause:okta_governance:Workflows", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-02", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-03", "target": "clause:anthropic_rsp:Responsible Scaling Officer", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/CG-03", "target": "clause:cobit_2019:MEA02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CG-03", "target": "clause:coso_erm:Component 1 \u2014 Board Oversight", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/CG-03", "target": "clause:eu_ai_act:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-03", "target": "clause:iso_37301:5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CG-03", "target": "clause:microsoft_compliance:Compliance Score", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-03", "target": "clause:okta_governance:Audit reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-03", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-03", "target": "clause:soc2:CC1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CG-04", "target": "clause:anthropic_rsp:Capability Thresholds", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "direct" }, { "source": "control:compliance/CG-04", "target": "clause:cobit_2019:APO12.02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CG-04", "target": "clause:coso_erm:Component 2 \u2014 Risk Appetite", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/CG-04", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-04", "target": "clause:iso_37301:6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CG-04", "target": "clause:microsoft_compliance:Compliance Score", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-04", "target": "clause:okta_governance:Access Certifications", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-04", "target": "clause:openai_policies:Usage Policies", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-04", "target": "clause:soc2:CC3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CG-05", "target": "clause:aws_artifact:Compliance report access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-05", "target": "clause:cobit_2019:APO07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/CG-05", "target": "clause:coso_erm:Component 1 \u2014 Attract and Retain Capable Individuals", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/CG-05", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-05", "target": "clause:google_compliance:Compliance report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-05", "target": "clause:iso_37301:7.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CG-05", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-05", "target": "clause:okta_governance:Access certification", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-05", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-05", "target": "clause:soc2:CC1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CG-06", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/CG-06", "target": "clause:aws_artifact:AWS security posture documentation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-06", "target": "clause:coso_erm:Component 4 \u2014 Review and Revision", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CG-06", "target": "clause:eu_ai_act:73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-06", "target": "clause:gdpr:33", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/CG-06", "target": "clause:gdpr:34", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/CG-06", "target": "clause:google_compliance:Shared responsibility matrix", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-06", "target": "clause:iso_37301:10.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CG-06", "target": "clause:microsoft_compliance:Improvement Action", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-06", "target": "clause:nist_csf:RS.AN", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:compliance/CG-06", "target": "clause:nist_csf:RS.CO", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:compliance/CG-06", "target": "clause:okta_governance:Audit reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-06", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-07", "target": "clause:anthropic_rsp:Capability assessment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/CG-07", "target": "clause:cobit_2019:MEA01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CG-07", "target": "clause:coso_erm:Component 5 \u2014 Information, Communication, and Reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/CG-07", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-07", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CG-07", "target": "clause:microsoft_compliance:Compliance Score", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-07", "target": "clause:okta_governance:Audit reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-07", "target": "clause:openai_policies:Data residency commitments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-07", "target": "clause:soc2:CC4.1 and CC4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CG-08", "target": "clause:anthropic_rsp:Capability Report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/CG-08", "target": "clause:aws_artifact:Third-party audit report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-08", "target": "clause:cobit_2019:MEA03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CG-08", "target": "clause:coso_erm:Component 5 \u2014 Reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/CG-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-08", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/CG-08", "target": "clause:google_compliance:Certification documentation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-08", "target": "clause:iso_37301:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CG-08", "target": "clause:iso_37301:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CG-08", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CG-08", "target": "clause:okta_governance:Access certification", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-08", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CG-08", "target": "clause:soc2:CC4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CI-01", "target": "clause:anthropic_rsp:Capability assessment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:compliance/CI-01", "target": "clause:coso_erm:Principle 15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/CI-01", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-01", "target": "clause:iso_37301:9.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CI-01", "target": "clause:microsoft_compliance:Improvement actions", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CI-01", "target": "clause:nist_800_53:CA-2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": "Rev5" }, "confidence": "direct" }, { "source": "control:compliance/CI-01", "target": "clause:nist_800_53:CA-7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": "Rev5" }, "confidence": "adjacent" }, { "source": "control:compliance/CI-01", "target": "clause:soc2:CC4.1, CC4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:compliance/CI-02", "target": "clause:eu_ai_act:72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CI-02", "target": "clause:fedramp_20x:KSI-MLA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "fedramp_20x", "relation": "equivalent_to", "source_version": "20x" }, "confidence": "direct" }, { "source": "control:compliance/CI-02", "target": "clause:gdpr:32", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:compliance/CI-02", "target": "clause:iso_37301:9.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CI-02", "target": "clause:microsoft_compliance:Compliance score monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CI-02", "target": "clause:nist_csf:DE.CM-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:compliance/CI-03", "target": "clause:cobit_2019:MEA01.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CI-03", "target": "clause:coso_erm:Principle 19", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/CI-03", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-03", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "adjacent" }, { "source": "control:compliance/CI-03", "target": "clause:iso_37301:9.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CI-03", "target": "clause:microsoft_compliance:Compliance score", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CI-04", "target": "clause:aws_artifact:Compliance report access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-04", "target": "clause:cobit_2019:APO11.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/CI-04", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CI-04", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CI-04", "target": "clause:google_compliance:Compliance Reports Manager", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-04", "target": "clause:iso_37301:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CI-04", "target": "clause:microsoft_compliance:Compliance Manager platform", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CI-04", "target": "clause:soc2:CC4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:compliance/CI-05", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/CI-05", "target": "clause:coso_erm:Principle 5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CI-05", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CI-05", "target": "clause:gdpr:39", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/CI-05", "target": "clause:iso_37301:7.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CI-05", "target": "clause:openai_policies:Usage Policies", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-05", "target": "clause:soc2:CC1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CI-06", "target": "clause:aws_artifact:Third-party audit report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-06", "target": "clause:cobit_2019:MEA02.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CI-06", "target": "clause:coso_erm:Principle 15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CI-06", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-06", "target": "clause:google_compliance:Certification documentation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-06", "target": "clause:iso_37301:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CI-06", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-06", "target": "clause:okta_governance:Audit reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-06", "target": "clause:soc2:CC4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/CI-07", "target": "clause:cobit_2019:MEA02.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/CI-07", "target": "clause:eu_ai_act:20", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-07", "target": "clause:iso_37301:10.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CI-07", "target": "clause:microsoft_compliance:Improvement Action", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-07", "target": "clause:nist_csf:RS.MI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:compliance/CI-07", "target": "clause:okta_governance:Workflows", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/CI-07", "target": "clause:soc2:CC4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/CI-08", "target": "clause:anthropic_rsp:Capability Report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/CI-08", "target": "clause:aws_artifact:Third-party audit report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-08", "target": "clause:cobit_2019:MEA03.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/CI-08", "target": "clause:coso_erm:Principle 20", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/CI-08", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/CI-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/CI-08", "target": "clause:google_compliance:Compliance report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-08", "target": "clause:iso_37301:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/CI-08", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-08", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/CI-08", "target": "clause:soc2:CC2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/OB-01", "target": "clause:anthropic_rsp:Capability Thresholds", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:compliance/OB-01", "target": "clause:aws_artifact:Compliance report access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/OB-01", "target": "clause:cobit_2019:APO12.02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/OB-01", "target": "clause:coso_erm:Principle 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/OB-01", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/OB-01", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:compliance/OB-01", "target": "clause:google_compliance:Compliance report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/OB-01", "target": "clause:iso_37301:4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/OB-01", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/OB-01", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/OB-01", "target": "clause:soc2:CC2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/OB-02", "target": "clause:cobit_2019:MEA02.01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/OB-02", "target": "clause:coso_erm:Principle 2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/OB-02", "target": "clause:eu_ai_act:16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/OB-02", "target": "clause:iso_37301:5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/OB-02", "target": "clause:microsoft_compliance:Improvement Action", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/OB-02", "target": "clause:okta_governance:Entitlement Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/OB-02", "target": "clause:soc2:CC1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/OB-03", "target": "clause:anthropic_rsp:Capability assessment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:compliance/OB-03", "target": "clause:cobit_2019:APO11.03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/OB-03", "target": "clause:coso_erm:Principle 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/OB-03", "target": "clause:eu_ai_act:43", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/OB-03", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/OB-03", "target": "clause:microsoft_compliance:Improvement Action", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/OB-03", "target": "clause:okta_governance:Access certification", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/OB-03", "target": "clause:soc2:CC4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/OB-04", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/OB-04", "target": "clause:aws_artifact:Third-party audit report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/OB-04", "target": "clause:cobit_2019:APO12.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/OB-04", "target": "clause:coso_erm:Principle 6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/OB-04", "target": "clause:eu_ai_act:16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/OB-04", "target": "clause:eu_ai_act:8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/OB-04", "target": "clause:iso_37301:4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/OB-04", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/OB-04", "target": "clause:openai_policies:Data Processing Addendum", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/OB-05", "target": "clause:aws_artifact:Compliance report access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/OB-05", "target": "clause:cobit_2019:MEA03.01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/OB-05", "target": "clause:coso_erm:Principle 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/OB-05", "target": "clause:iso_27001:A.5.31", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27001", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:compliance/OB-05", "target": "clause:iso_37301:4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/OB-05", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/OB-05", "target": "clause:nist_csf:GV.OC-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:compliance/OB-05", "target": "clause:okta_governance:Audit reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/OB-05", "target": "clause:soc2:A1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/OB-06", "target": "clause:anthropic_rsp:Required Safeguards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/OB-06", "target": "clause:aws_artifact:Artifact agreement", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/OB-06", "target": "clause:cobit_2019:APO09.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/OB-06", "target": "clause:coso_erm:Principle 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/OB-06", "target": "clause:eu_ai_act:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/OB-06", "target": "clause:gdpr:28", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:compliance/OB-06", "target": "clause:iso_37301:4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/OB-06", "target": "clause:microsoft_compliance:Control mapping", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/OB-06", "target": "clause:okta_governance:Entitlement Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/OB-06", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/OB-06", "target": "clause:soc2:CC9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/OB-07", "target": "clause:aws_artifact:Third-party audit report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/OB-07", "target": "clause:cobit_2019:MEA02.02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/OB-07", "target": "clause:coso_erm:Principle 16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/OB-07", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/OB-07", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:compliance/OB-07", "target": "clause:google_compliance:Compliance report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/OB-07", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/OB-07", "target": "clause:microsoft_compliance:Compliance Score", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/OB-07", "target": "clause:okta_governance:Access certification", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/OB-07", "target": "clause:soc2:CC4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/OB-08", "target": "clause:anthropic_rsp:Capability Report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:compliance/OB-08", "target": "clause:aws_artifact:Third-party audit report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/OB-08", "target": "clause:cobit_2019:MEA03.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:compliance/OB-08", "target": "clause:coso_erm:Principle 16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/OB-08", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/OB-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:compliance/OB-08", "target": "clause:google_compliance:Certification documentation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/OB-08", "target": "clause:iso_37301:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/OB-08", "target": "clause:microsoft_compliance:Compliance Score", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/OB-08", "target": "clause:okta_governance:Audit reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/OB-08", "target": "clause:soc2:CC4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2017" }, "confidence": "direct" }, { "source": "control:compliance/RF-01", "target": "clause:anthropic_rsp:Capability Thresholds", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/RF-01", "target": "clause:cobit_2019:APO12.02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/RF-01", "target": "clause:coso_erm:Principle 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/RF-01", "target": "clause:dora:28", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "supporting" }, { "source": "control:compliance/RF-01", "target": "clause:eu_ai_act:6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:compliance/RF-01", "target": "clause:eu_ai_act:Annex III", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:compliance/RF-01", "target": "clause:gdpr:35", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "adjacent" }, { "source": "control:compliance/RF-01", "target": "clause:google_compliance:Regulatory guidance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/RF-01", "target": "clause:iso_37301:4.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/RF-01", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/RF-01", "target": "clause:openai_policies:Usage Policies", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/RF-02", "target": "clause:cobit_2019:APO11.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/RF-02", "target": "clause:coso_erm:Principle 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "adjacent" }, { "source": "control:compliance/RF-02", "target": "clause:eu_ai_act:43", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:compliance/RF-02", "target": "clause:iso_37301:8.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/RF-02", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/RF-02", "target": "clause:nis2:21", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nis2", "relation": "satisfies", "source_version": "2022/2555" }, "confidence": "supporting" }, { "source": "control:compliance/RF-03", "target": "clause:anthropic_rsp:Capability Report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/RF-03", "target": "clause:aws_artifact:Third-party audit report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/RF-03", "target": "clause:cobit_2019:BAI03.07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/RF-03", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:compliance/RF-03", "target": "clause:eu_ai_act:Annex IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:compliance/RF-03", "target": "clause:google_compliance:Certification documentation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/RF-03", "target": "clause:iso_27001:A.5.9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27001", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:compliance/RF-03", "target": "clause:iso_37301:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/RF-03", "target": "clause:microsoft_compliance:Assessment template \u2014 EU AI Act", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/RF-03", "target": "clause:nist_csf:GV.OC-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:compliance/RF-03", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/RF-04", "target": "clause:anthropic_rsp:Capability assessment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:compliance/RF-04", "target": "clause:cobit_2019:DSS01.03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/RF-04", "target": "clause:coso_erm:Principle 16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_erm", "relation": "informs", "source_version": "2017" }, "confidence": "partial" }, { "source": "control:compliance/RF-04", "target": "clause:eu_ai_act:72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:compliance/RF-04", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/RF-04", "target": "clause:microsoft_compliance:Improvement Action", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/RF-04", "target": "clause:nist_csf:DE.CM-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:compliance/RF-05", "target": "clause:aws_artifact:FedRAMP High Package", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:compliance/RF-05", "target": "clause:google_compliance:FedRAMP High", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:compliance/RF-05", "target": "clause:iso_27001:A.5.31", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27001", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "adjacent" }, { "source": "control:compliance/RF-05", "target": "clause:microsoft_compliance:FedRAMP High & DoD IL5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:compliance/RF-05", "target": "clause:nist_csf:GV.OC-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:compliance/RF-05", "target": "clause:okta_governance:Access certification", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/RF-05", "target": "clause:openai_policies:Data residency commitments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:compliance/RF-06", "target": "clause:aws_artifact:Third-party audit report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_artifact", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/RF-06", "target": "clause:cobit_2019:APO14.01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/RF-06", "target": "clause:google_compliance:Compliance report", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/RF-06", "target": "clause:iso_27001:A.5.23", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27001", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:compliance/RF-06", "target": "clause:iso_37301:9.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/RF-06", "target": "clause:microsoft_compliance:Assessment template", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/RF-06", "target": "clause:nist_csf:ID.AM-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:compliance/RF-06", "target": "clause:okta_governance:Audit reporting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_governance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/RF-06", "target": "clause:openai_policies:Enterprise DPA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_policies", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/RF-06", "target": "clause:soc2:CC6.1, CC7.1, CC9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:compliance/RF-07", "target": "clause:cobit_2019:EDM01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "adjacent" }, { "source": "control:compliance/RF-07", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/RF-07", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:compliance/RF-07", "target": "clause:iso_27001:4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27001", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:compliance/RF-07", "target": "clause:iso_37301:4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:compliance/RF-07", "target": "clause:microsoft_compliance:ISO 42001 assessment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_compliance", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/RF-08", "target": "clause:cobit_2019:MEA01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:compliance/RF-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/RF-08", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:compliance/RF-08", "target": "clause:iso_37301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_37301", "relation": "equivalent_to", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:data/DA-01", "target": "clause:cobit_2019:DSS06.03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DA-01", "target": "clause:dama_dmbok:Ch. 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DA-01", "target": "clause:eu_data_gov_act:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_data_gov_act", "relation": "satisfies", "source_version": "2022/868" }, "confidence": "direct" }, { "source": "control:data/DA-01", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DA-01", "target": "clause:mitre:AML.M0000", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DA-01", "target": "clause:mitre:AML.M0001", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DA-01", "target": "clause:ms_ifc_agents:Confidentiality label read-access list ({Alice, Bob, Charlie", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ms_ifc_agents", "relation": "informs", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:data/DA-01", "target": "clause:nist_pf:PR.AC-P4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:data/DA-01", "target": "clause:owasp_ai_exchange:discrete", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DA-02", "target": "clause:dama_dmbok:Ch. 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:data/DA-02", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DA-02", "target": "clause:iso_27701:7.4.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DA-02", "target": "clause:nist_pf:CT.DP-P1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:data/DA-02", "target": "clause:owasp_ai_exchange:dataminimize", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:data/DA-03", "target": "clause:anthropic_privacy:Privacy Policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DA-03", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DA-03", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DA-03", "target": "clause:iso_27701:7.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DA-03", "target": "clause:nist_pf:CT.PO-P1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:data/DA-03", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DA-04", "target": "clause:cobit_2019:DSS06.03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DA-04", "target": "clause:dama_dmbok:Ch. 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DA-04", "target": "clause:iso_27701:6.9.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DA-04", "target": "clause:microsoft_purview:Purview Insider Risk Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DA-04", "target": "clause:nist_pf:CT.DM-P8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:data/DA-05", "target": "clause:cobit_2019:DSS06.03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DA-05", "target": "clause:dama_dmbok:Ch. 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DA-05", "target": "clause:gdpr:32", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "partial" }, { "source": "control:data/DA-05", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "partial" }, { "source": "control:data/DA-06", "target": "clause:cobit_2019:DSS06.03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DA-06", "target": "clause:gdpr:44", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DA-06", "target": "clause:gdpr:Chapter V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DA-06", "target": "clause:iso_27701:7.5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DA-06", "target": "clause:nist_pf:GV.PO-P1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:data/DA-06", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DA-07", "target": "clause:cobit_2019:DSS06.03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DA-07", "target": "clause:dama_dmbok:Ch. 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DA-07", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "partial" }, { "source": "control:data/DA-07", "target": "clause:iso_27701:6.9.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DA-07", "target": "clause:nist_pf:CT.DM-P8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:data/DA-08", "target": "clause:cobit_2019:MEA02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DA-08", "target": "clause:dama_dmbok:Ch. 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DA-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DA-08", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DA-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DA-08", "target": "clause:nist_pf:GV.MT-P1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:data/DI-01", "target": "clause:cobit_2019:DSS06.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DI-01", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DI-01", "target": "clause:databricks_unity:Unity Catalog \u2014 Data Lineage and Auditing", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DI-01", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DI-01", "target": "clause:eu_data_act:3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_data_act", "relation": "satisfies", "source_version": "2023/2854" }, "confidence": "adjacent" }, { "source": "control:data/DI-01", "target": "clause:iso_8000:8000-61", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_8000", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:data/DI-01", "target": "clause:microsoft_purview:Data Catalog \u2014 Data Lineage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DI-01", "target": "clause:mitre:AML.M0007", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DI-01", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DI-02", "target": "clause:aws_lake_formation:AWS Glue Schema Registry", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_lake_formation", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DI-02", "target": "clause:cobit_2019:APO12.06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DI-02", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DI-02", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DI-02", "target": "clause:google_dataplex:Dataplex Auto Data Quality (scheduled/batch scans)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_dataplex", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DI-02", "target": "clause:nist_pf:PR.DS-P6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:data/DI-02", "target": "clause:owasp_ai_exchange:runtimemodeliointegrity", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DI-03", "target": "clause:cobit_2019:DSS06.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DI-03", "target": "clause:dama_dmbok:Ch. 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DI-03", "target": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DI-03", "target": "clause:dcam:Capability 5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DI-03", "target": "clause:iso_8000:8000-110", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_8000", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:data/DI-03", "target": "clause:mitre:AML.M0007", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DI-03", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DI-03", "target": "clause:snowflake_horizon:Data Quality Monitoring (data metric functions)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "snowflake_horizon", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DI-04", "target": "clause:anthropic_privacy:Usage Policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DI-04", "target": "clause:cobit_2019:DSS06.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DI-04", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DI-04", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DI-04", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:data/DI-04", "target": "clause:nist_pf:PR.DS-P6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:data/DI-04", "target": "clause:owasp_ai_exchange:runtimemodeliointegrity", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DI-05", "target": "clause:aws_lake_formation:Amazon S3 \u2014 Object Integrity and Checksums", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_lake_formation", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DI-05", "target": "clause:cobit_2019:DSS04.07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DI-05", "target": "clause:dama_dmbok:Ch. 6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DI-05", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DI-05", "target": "clause:google_dataplex:Cloud Storage \u2014 Object Integrity and Retention Lock", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_dataplex", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DI-05", "target": "clause:iso_8000:8000-61", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_8000", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:data/DI-06", "target": "clause:anthropic_privacy:Privacy Policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DI-06", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DI-06", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:data/DI-06", "target": "clause:iso_27701:7.2.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DI-06", "target": "clause:microsoft_purview:Microsoft Purview \u2014 Sensitive Information Types and DLP", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DI-06", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DI-06", "target": "clause:nist_pf:CT.DP-P2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:data/DI-06", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:data/DI-07", "target": "clause:cobit_2019:DSS02.07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DI-07", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DI-07", "target": "clause:dcam:Capability 5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DI-07", "target": "clause:eu_ai_act:73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DI-07", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:data/DI-08", "target": "clause:cobit_2019:MEA01.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DI-08", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DI-08", "target": "clause:dcam:Component 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DI-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DI-08", "target": "clause:eu_ai_act:Annex IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DI-08", "target": "clause:iso_8000:8000-61", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_8000", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:data/DI-08", "target": "clause:microsoft_purview:Purview Compliance Manager", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DL-01", "target": "clause:cobit_2019:DSS06.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DL-01", "target": "clause:dama_dmbok:Ch. 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DL-01", "target": "clause:dcam:Component 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DL-01", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DL-01", "target": "clause:microsoft_purview:Data lineage (lineage extraction)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DL-01", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DL-01", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DL-01", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:data/DL-01", "target": "clause:openlineage:RunEvent object (OpenLineage.json JSON Schema)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openlineage", "relation": "equivalent_to", "source_version": "1.0.0" }, "confidence": "direct" }, { "source": "control:data/DL-01", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DL-02", "target": "clause:anthropic_privacy:Privacy Policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DL-02", "target": "clause:dama_dmbok:Ch. 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DL-02", "target": "clause:databricks_unity:Unity Catalog lineage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DL-02", "target": "clause:dcam:Capability 5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DL-02", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DL-02", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DL-02", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DL-02", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:data/DL-02", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DL-02", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DL-03", "target": "clause:dama_dmbok:Ch. 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:data/DL-03", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DL-03", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DL-03", "target": "clause:iso_27701:7.2.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "adjacent" }, { "source": "control:data/DL-03", "target": "clause:ms_ifc_agents:Propagate labels \u2014 labels travel with derivative results as", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ms_ifc_agents", "relation": "informs", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:data/DL-03", "target": "clause:nist_pf:CT.PO-P1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:data/DL-04", "target": "clause:dama_dmbok:Ch. 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DL-04", "target": "clause:databricks_unity:Column-Level Lineage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DL-04", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DL-04", "target": "clause:google_dataplex:Data Lineage API", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_dataplex", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DL-04", "target": "clause:iso_8000:8000-120", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_8000", "relation": "equivalent_to", "source_version": "2015" }, "confidence": "direct" }, { "source": "control:data/DL-04", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DL-04", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DL-04", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:data/DL-04", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DL-05", "target": "clause:cobit_2019:MEA02.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DL-05", "target": "clause:dama_dmbok:Ch. 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DL-05", "target": "clause:dcam:Capability 5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:data/DL-05", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:data/DL-05", "target": "clause:microsoft_purview:Data Estate Insights", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DL-06", "target": "clause:cobit_2019:MEA03.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DL-06", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DL-06", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DL-06", "target": "clause:iso_27701:7.2.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DL-06", "target": "clause:nist_pf:GV.PO-P5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:data/DL-07", "target": "clause:cobit_2019:APO04.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DL-07", "target": "clause:dama_dmbok:Ch. 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DL-07", "target": "clause:databricks_unity:Unity Catalog", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DL-07", "target": "clause:dcam:Capability 6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:data/DL-07", "target": "clause:snowflake_horizon:Access History (object dependency lineage)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "snowflake_horizon", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DL-08", "target": "clause:cobit_2019:MEA04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DL-08", "target": "clause:dama_dmbok:Ch. 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DL-08", "target": "clause:dcam:Capability 5.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DL-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DL-08", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DL-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "partial" }, { "source": "control:data/DL-08", "target": "clause:iso_27701:7.2.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "adjacent" }, { "source": "control:data/DM-01", "target": "clause:cobit_2019:APO01.06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DM-01", "target": "clause:dama_dmbok:Ch. 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DM-01", "target": "clause:data_contract_spec:Schema and Terms sections", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "data_contract_spec", "relation": "equivalent_to", "source_version": "3.1.0 (ODCS)" }, "confidence": "direct" }, { "source": "control:data/DM-01", "target": "clause:databricks_unity:Unity Catalog", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DM-01", "target": "clause:dcam:Capability 3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DM-01", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DM-01", "target": "clause:microsoft_purview:Data Map", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DM-02", "target": "clause:aws_lake_formation:Amazon Macie", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_lake_formation", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DM-02", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:data/DM-02", "target": "clause:iso_27701:6.5.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DM-02", "target": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DM-02", "target": "clause:nist_pf:ID.IM-P6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:data/DM-02", "target": "clause:owasp_ai_exchange:segregatedata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DM-03", "target": "clause:cobit_2019:APO01.06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DM-03", "target": "clause:dama_dmbok:Ch. 6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DM-03", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DM-03", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:data/DM-03", "target": "clause:iso_27701:7.4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DM-03", "target": "clause:nist_pf:CT.DM-P4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:data/DM-03", "target": "clause:owasp_ai_exchange:shortretain", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:data/DM-04", "target": "clause:dama_dmbok:Ch. 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DM-04", "target": "clause:databricks_unity:Unity Catalog", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DM-04", "target": "clause:dcam:Capability 5.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DM-04", "target": "clause:iso_8000:8000-110", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_8000", "relation": "equivalent_to", "source_version": "2015" }, "confidence": "partial" }, { "source": "control:data/DM-04", "target": "clause:snowflake_horizon:Object tagging", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "snowflake_horizon", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DM-05", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DM-05", "target": "clause:dcam:Capability 5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:data/DM-05", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DM-05", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:data/DM-05", "target": "clause:google_dataplex:Auto Data Quality", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_dataplex", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DM-05", "target": "clause:iso_8000:8000-8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_8000", "relation": "equivalent_to", "source_version": "2015" }, "confidence": "direct" }, { "source": "control:data/DM-05", "target": "clause:mitre:AML.M0007", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DM-05", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:data/DM-06", "target": "clause:dama_dmbok:Ch. 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DM-06", "target": "clause:databricks_unity:Delta Lake schema enforcement and evolution", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DM-06", "target": "clause:dcam:Capability 3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DM-06", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DM-06", "target": "clause:google_dataplex:BigQuery schema management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_dataplex", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DM-06", "target": "clause:snowflake_horizon:Access History", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "snowflake_horizon", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DM-07", "target": "clause:anthropic_privacy:Privacy Policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DM-07", "target": "clause:dama_dmbok:Ch. 14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:data/DM-07", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DM-07", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:data/DM-07", "target": "clause:iso_8000:8000-8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_8000", "relation": "equivalent_to", "source_version": "2015" }, "confidence": "partial" }, { "source": "control:data/DM-07", "target": "clause:nist_pf:CT.DP-P2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:data/DM-07", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DM-08", "target": "clause:cobit_2019:MEA01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DM-08", "target": "clause:dama_dmbok:Ch. 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DM-08", "target": "clause:dcam:Capability 2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DM-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DM-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:data/DM-08", "target": "clause:iso_8000:8000-61", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_8000", "relation": "equivalent_to", "source_version": "2015" }, "confidence": "adjacent" }, { "source": "control:data/DV-01", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DV-01", "target": "clause:databricks_unity:Lakeflow Declarative Pipelines (DLT) expectations", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DV-01", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DV-01", "target": "clause:iso_8000:8000-8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_8000", "relation": "equivalent_to", "source_version": "2015" }, "confidence": "direct" }, { "source": "control:data/DV-01", "target": "clause:microsoft_purview:Data Quality (data type and format rules)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DV-01", "target": "clause:mitre:AML.M0007", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DV-01", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DV-02", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DV-02", "target": "clause:dcam:Capability 5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DV-02", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DV-02", "target": "clause:google_dataplex:Dataplex Data Quality \u2014 Quality Rules", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_dataplex", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DV-02", "target": "clause:iso_8000:8000-8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_8000", "relation": "equivalent_to", "source_version": "2015" }, "confidence": "direct" }, { "source": "control:data/DV-02", "target": "clause:mitre:AML.M0007", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DV-02", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:data/DV-03", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DV-03", "target": "clause:databricks_unity:Databricks Lakehouse Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DV-03", "target": "clause:dcam:Capability 5.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DV-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DV-03", "target": "clause:google_dataplex:Dataplex Data Profile Scans", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_dataplex", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DV-03", "target": "clause:mitre:AML.M0007", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:data/DV-03", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DV-04", "target": "clause:anthropic_privacy:Usage Policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DV-04", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DV-04", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DV-04", "target": "clause:snowflake_horizon:Data Quality \u2014 Quality Metric Functions", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "snowflake_horizon", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DV-05", "target": "clause:cobit_2019:DSS02.02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DV-05", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DV-05", "target": "clause:dcam:Capability 5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DV-05", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:data/DV-05", "target": "clause:microsoft_purview:Data Health Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DV-06", "target": "clause:cobit_2019:MEA01.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DV-06", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DV-06", "target": "clause:databricks_unity:Databricks Lakehouse Monitoring \u2014 Metric Tables", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DV-06", "target": "clause:dcam:Capability 5.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DV-06", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:data/DV-06", "target": "clause:snowflake_horizon:Snowflake Data Metric Functions \u2014 History", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "snowflake_horizon", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DV-07", "target": "clause:aws_lake_formation:AWS Glue Data Quality (DQDL rulesets)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_lake_formation", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DV-07", "target": "clause:cobit_2019:BAI03.08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DV-07", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DV-07", "target": "clause:databricks_unity:Lakehouse Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:data/DV-07", "target": "clause:dcam:Capability 5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DV-08", "target": "clause:cobit_2019:MEA04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DV-08", "target": "clause:dama_dmbok:Ch. 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DV-08", "target": "clause:dcam:Capability 6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DV-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DV-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:data/DV-08", "target": "clause:iso_8000:8000-61", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_8000", "relation": "equivalent_to", "source_version": "2015" }, "confidence": "partial" }, { "source": "control:data/DX-01", "target": "clause:dama_dmbok:Ch. 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DX-01", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DX-01", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DX-01", "target": "clause:iso_5259:5259-1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_5259", "relation": "equivalent_to", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DX-01", "target": "clause:microsoft_purview:Information Protection \u2014 sensitivity labels", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DX-01", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ms_ifc_agents", "relation": "informs", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:data/DX-01", "target": "clause:nist_pf:ID.IM-P1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:data/DX-02", "target": "clause:cobit_2019:DSS05.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DX-02", "target": "clause:dama_dmbok:Ch. 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DX-02", "target": "clause:dcam:Component 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DX-02", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DX-02", "target": "clause:nist_pf:CT.PO-P2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:data/DX-02", "target": "clause:owasp_ai_exchange:segregatedata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DX-03", "target": "clause:dama_dmbok:Ch. 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DX-03", "target": "clause:databricks_unity:Delta Sharing (open protocol)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DX-03", "target": "clause:dcam:Capability 3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dcam", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:data/DX-03", "target": "clause:google_dataplex:Dataplex Universal Catalog (Data Catalog successor)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_dataplex", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DX-04", "target": "clause:gdpr:44", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DX-04", "target": "clause:iso_27701:7.5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DX-04", "target": "clause:microsoft_purview:Microsoft 365 Advanced Data Residency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DX-04", "target": "clause:nist_pf:GV.PO-P5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:data/DX-04", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DX-05", "target": "clause:anthropic_privacy:Privacy Policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:data/DX-05", "target": "clause:eu_ai_act:23", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:data/DX-05", "target": "clause:gdpr:28", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DX-05", "target": "clause:iso_27701:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DX-05", "target": "clause:nist_pf:CT.PO-P2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:data/DX-05", "target": "clause:owasp_ai_exchange:segregatedata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:data/DX-06", "target": "clause:cobit_2019:MEA03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:data/DX-06", "target": "clause:dama_dmbok:Ch. 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DX-06", "target": "clause:gdpr:30", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DX-06", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:data/DX-06", "target": "clause:iso_27701:8.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DX-06", "target": "clause:microsoft_purview:Purview Audit (unified audit log)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DX-07", "target": "clause:dama_dmbok:Ch. 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:data/DX-07", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "partial" }, { "source": "control:data/DX-07", "target": "clause:iso_27701:7.4.9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DX-07", "target": "clause:microsoft_purview:Microsoft platform encryption in transit (TLS)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_purview", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:data/DX-07", "target": "clause:nist_pf:PR.DS-P2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:data/DX-08", "target": "clause:cobit_2019:MEA02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_2019", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:data/DX-08", "target": "clause:dama_dmbok:Ch. 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:data/DX-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DX-08", "target": "clause:eu_ai_act:Annex IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:data/DX-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:ethics/EF-01", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (AI Safety Lev", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:ethics/EF-01", "target": "clause:co_ai_act:\u00a76-1-1701 et seq. (Automated decision-making technology \u2014 co", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "co_ai_act", "relation": "satisfies", "source_version": "SB 26-189" }, "confidence": "partial" }, { "source": "control:ethics/EF-01", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EF-01", "target": "clause:ieee_7000:\u00a76.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/EF-01", "target": "clause:iso_23894:4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_23894", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/EF-01", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EF-01", "target": "clause:iso_42001:8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EF-01", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/EF-01", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/EF-01", "target": "clause:microsoft_rai:T1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/EF-01", "target": "clause:microsoft_rai:T3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/EF-01", "target": "clause:nist_rmf:GOVERN 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EF-01", "target": "clause:nist_rmf:GOVERN 2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EF-01", "target": "clause:oecd_ai_principles:Principles 1.1\u20131.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:ethics/EF-01", "target": "clause:openai_model_spec:Overview (spec structure: The chain of command; Stay in boun", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/EF-01", "target": "clause:un_ethics_ai:\u00b613\u2013\u00b624 (Values)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "un_ethics_ai", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/EF-02", "target": "clause:anthropic_rsp:ASL-3 Deployment and Security Standards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:ethics/EF-02", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:ethics/EF-02", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:ethics/EF-02", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EF-02", "target": "clause:ibm_ai_fairness:Fairness metrics (demographic parity difference, equalized o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/EF-02", "target": "clause:ieee_7000:\u00a77", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/EF-02", "target": "clause:ieee_7000:\u00a79", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/EF-02", "target": "clause:iso_42001:8.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EF-02", "target": "clause:microsoft_rai:F1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-02", "target": "clause:microsoft_rai:F3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-02", "target": "clause:microsoft_rai:T1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-02", "target": "clause:nist_rmf:MAP 1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EF-02", "target": "clause:nist_rmf:MAP 2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EF-02", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/EF-03", "target": "clause:acm_ethics:\u00a71.2, \u00a72.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "adjacent" }, { "source": "control:ethics/EF-03", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:ethics/EF-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:ethics/EF-03", "target": "clause:google_ai_principles:Bold innovation \u2014 pursuing AI where likely overall benefits", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EF-03", "target": "clause:iso_42001:6.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EF-03", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EF-03", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/EF-03", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-03", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-03", "target": "clause:nist_rmf:GOVERN 1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EF-03", "target": "clause:nist_rmf:GOVERN 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EF-03", "target": "clause:oecd_ai_principles:Principle 1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/EF-03", "target": "clause:openai_model_spec:The chain of command; Stay in bounds", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/EF-04", "target": "clause:anthropic_rsp:Risk Reports (capability and safeguards assessment before de", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:ethics/EF-04", "target": "clause:eu_ai_act:27", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/EF-04", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/EF-04", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EF-04", "target": "clause:ibm_ai_fairness:Fairness metrics (~70 dataset- and model-level metrics)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/EF-04", "target": "clause:ieee_7000:\u00a710", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/EF-04", "target": "clause:iso_42001:8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EF-04", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EF-04", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/EF-04", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/EF-04", "target": "clause:nist_rmf:MAP 5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EF-04", "target": "clause:nist_rmf:MEASURE 2.11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EF-04", "target": "clause:oecd_ai_principles:Principles 1.3, 1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/EF-04", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/EF-05", "target": "clause:acm_ethics:\u00a71.1, \u00a71.2, \u00a72.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "adjacent" }, { "source": "control:ethics/EF-05", "target": "clause:eu_ai_act:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/EF-05", "target": "clause:eu_charter:1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "direct" }, { "source": "control:ethics/EF-05", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 alignment with wide", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EF-05", "target": "clause:iso_42001:8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/EF-05", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EF-05", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-05", "target": "clause:microsoft_rai:F1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-05", "target": "clause:microsoft_rai:F3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-05", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/EF-05", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/EF-06", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards (evaluation-ga", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:ethics/EF-06", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:ethics/EF-06", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:ethics/EF-06", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:ethics/EF-06", "target": "clause:ibm_ai_fairness:Bias mitigation algorithms and pipeline-stage metric checks", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/EF-06", "target": "clause:ieee_7000:\u00a711", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/EF-06", "target": "clause:ieee_7000:\u00a75", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/EF-06", "target": "clause:iso_42001:8.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EF-06", "target": "clause:meta_llama_rai:Responsible LLM product development stages; Model-level alig", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/EF-06", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-06", "target": "clause:mitre:AML.M0021", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:ethics/EF-06", "target": "clause:mitre:AML.M0022", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:ethics/EF-06", "target": "clause:nist_rmf:GOVERN 1.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EF-06", "target": "clause:nist_rmf:MAP 1.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EF-06", "target": "clause:owasp_ai_exchange:modelalignment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "adjacent" }, { "source": "control:ethics/EF-07", "target": "clause:eu_ai_act:27", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:ethics/EF-07", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EF-07", "target": "clause:iso_42001:4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/EF-07", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/EF-07", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-07", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-07", "target": "clause:microsoft_rai:I1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-07", "target": "clause:nist_rmf:GOVERN 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:ethics/EF-07", "target": "clause:nist_rmf:MAP 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:ethics/EF-07", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:ethics/EF-07", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "un_ethics_ai", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/EF-08", "target": "clause:acm_ethics:\u00a72.3, \u00a73.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "adjacent" }, { "source": "control:ethics/EF-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/EF-08", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/EF-08", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EF-08", "target": "clause:iso_42001:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EF-08", "target": "clause:iso_42001:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EF-08", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-08", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-08", "target": "clause:microsoft_rai:T2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EF-08", "target": "clause:nist_rmf:GOVERN 4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EF-08", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/EG-01", "target": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:ethics/EG-01", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/EG-01", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EG-01", "target": "clause:ieee_7000:\u00a77.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/EG-01", "target": "clause:iso_42001:6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EG-01", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/EG-01", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/EG-01", "target": "clause:nist_rmf:GOVERN 2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EG-01", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:ethics/EG-02", "target": "clause:acm_ethics:\u00a71.1\u20131.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/EG-02", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:ethics/EG-02", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/EG-02", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/EG-02", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EG-02", "target": "clause:iso_42001:5.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EG-02", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/EG-02", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EG-02", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EG-02", "target": "clause:nist_rmf:GOVERN 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EG-02", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:ethics/EG-02", "target": "clause:openai_model_spec:Overview; The chain of command; Stay in bounds", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/EG-03", "target": "clause:anthropic_rsp:Governance and Transparency \u2014 Responsible Scaling Officer an", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:ethics/EG-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/EG-03", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EG-03", "target": "clause:iso_42001:5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EG-03", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/EG-03", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/EG-03", "target": "clause:nist_rmf:GOVERN 2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EG-03", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:ethics/EG-03", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "un_ethics_ai", "relation": "informs", "source_version": "2021" }, "confidence": "adjacent" }, { "source": "control:ethics/EG-04", "target": "clause:eu_ai_act:4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/EG-04", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "adjacent" }, { "source": "control:ethics/EG-04", "target": "clause:ibm_ai_fairness:Fairness metrics and mitigation algorithms (training curricu", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/EG-04", "target": "clause:ieee_7000:Clause 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "adjacent" }, { "source": "control:ethics/EG-04", "target": "clause:iso_42001:7.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EG-04", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EG-04", "target": "clause:nist_rmf:GOVERN 2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EG-05", "target": "clause:anthropic_rsp:Governance and Transparency \u2014 public safety framework disclo", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:ethics/EG-05", "target": "clause:eu_ai_act:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/EG-05", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EG-05", "target": "clause:ibm_ai_fairness:Fairness metrics (vendor due-diligence benchmark)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/EG-05", "target": "clause:iso_42001:8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EG-05", "target": "clause:meta_llama_rai:Responsible Use Guide (provider guidance); Llama Acceptable", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EG-05", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EG-05", "target": "clause:nist_rmf:GOVERN 6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EG-05", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:ethics/EG-05", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/EG-06", "target": "clause:acm_ethics:\u00a71.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "adjacent" }, { "source": "control:ethics/EG-06", "target": "clause:anthropic_rsp:Capability Thresholds (threshold-triggered evaluation and re", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:ethics/EG-06", "target": "clause:eu_ai_act:73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/EG-06", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EG-06", "target": "clause:ieee_7000:Clause 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "adjacent" }, { "source": "control:ethics/EG-06", "target": "clause:iso_42001:10.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EG-06", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/EG-06", "target": "clause:microsoft_rai:RS1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EG-06", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EG-06", "target": "clause:nist_rmf:MANAGE 4.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EG-06", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/EG-07", "target": "clause:anthropic_rsp:Risk Reports (evaluation-gated deployment)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:ethics/EG-07", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:ethics/EG-07", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EG-07", "target": "clause:ibm_ai_fairness:Fairness metrics (quantitative outcome indicators)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/EG-07", "target": "clause:ieee_7000:\u00a79.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/EG-07", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EG-07", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EG-07", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EG-07", "target": "clause:nist_rmf:MEASURE 2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EG-07", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:ethics/EG-07", "target": "clause:openai_model_spec:Stay in bounds; Seek the truth together; Do the best work", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/EG-08", "target": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:ethics/EG-08", "target": "clause:eu_ai_act:43", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/EG-08", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/EG-08", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/EG-08", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/EG-08", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EG-08", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EG-08", "target": "clause:microsoft_rai:T1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EG-08", "target": "clause:microsoft_rai:T3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/EG-08", "target": "clause:nist_rmf:GOVERN 4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/EG-08", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:ethics/EG-08", "target": "clause:openai_model_spec:Overview (published model behavior specification)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/EG-08", "target": "clause:un_ethics_ai:\u00b647 (Multi-stakeholder and adaptive governance)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "un_ethics_ai", "relation": "informs", "source_version": "2021" }, "confidence": "adjacent" }, { "source": "control:ethics/EG-09", "target": "clause:plot4ai:safety-and-environmental-impact", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "plot4ai", "relation": "defends_against", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:ethics/FA-01", "target": "clause:doj_ai:ADA application to algorithmic hiring tools ('screen out' di", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "doj_ai", "relation": "satisfies", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:ethics/FA-01", "target": "clause:eeoc_ai:Adverse impact assessment under Title VII (Q&A technical ass", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eeoc_ai", "relation": "satisfies", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/FA-01", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FA-01", "target": "clause:eu_charter:21", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "direct" }, { "source": "control:ethics/FA-01", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:ethics/FA-01", "target": "clause:ibm_ai_fairness:Protected attribute specification (privileged/unprivileged g", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:ethics/FA-01", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/FA-01", "target": "clause:microsoft_rai:F1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/FA-01", "target": "clause:nist_rmf:MAP 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FA-01", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/FA-02", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FA-02", "target": "clause:ftc_ai:FTC Act \u00a75 (unfair or deceptive practices) \u2014 2021 blog guida", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ftc_ai", "relation": "satisfies", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/FA-02", "target": "clause:ibm_ai_fairness:Dataset and classifier fairness metrics", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:ethics/FA-02", "target": "clause:ieee_7000:Clause 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/FA-02", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FA-02", "target": "clause:microsoft_rai:F1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FA-02", "target": "clause:microsoft_rai:F3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FA-02", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:ethics/FA-02", "target": "clause:nist_rmf:MAP 2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FA-02", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:ethics/FA-03", "target": "clause:acm_ethics:\u00a71.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/FA-03", "target": "clause:eu_ai_act:Annex IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:ethics/FA-03", "target": "clause:ibm_ai_fairness:Fairness metric taxonomy (~70 metrics)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:ethics/FA-03", "target": "clause:ieee_7000:\u00a77.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/FA-03", "target": "clause:nist_rmf:MEASURE 2.11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FA-03", "target": "clause:nyc_ll144:\u00a720-871 (Bias audit requirements)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nyc_ll144", "relation": "satisfies", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/FA-04", "target": "clause:acm_ethics:\u00a72.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/FA-04", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FA-04", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/FA-04", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FA-04", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:ethics/FA-04", "target": "clause:nist_rmf:MEASURE 2.11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FA-04", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:ethics/FA-05", "target": "clause:eu_ai_act:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:ethics/FA-05", "target": "clause:iso_42001:4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/FA-05", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "adjacent" }, { "source": "control:ethics/FA-05", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "adjacent" }, { "source": "control:ethics/FA-05", "target": "clause:nist_rmf:GOVERN 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FA-05", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/FA-06", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FA-06", "target": "clause:eu_charter:21", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "partial" }, { "source": "control:ethics/FA-06", "target": "clause:ibm_ai_fairness:Disparate impact metric (four-fifths rule)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:ethics/FA-06", "target": "clause:ieee_7000:Clause 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/FA-06", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:ethics/FA-06", "target": "clause:nist_rmf:MEASURE 2.11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FA-06", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:ethics/FA-07", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FA-07", "target": "clause:ieee_7000:Clause 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/FA-07", "target": "clause:iso_42001:10.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/FA-07", "target": "clause:microsoft_rai:RS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FA-07", "target": "clause:nist_rmf:MANAGE 1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FA-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FA-08", "target": "clause:eu_ai_act:Annex IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FA-08", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "adjacent" }, { "source": "control:ethics/FA-08", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/FA-08", "target": "clause:nist_rmf:GOVERN 4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FA-08", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/FM-01", "target": "clause:anthropic_rsp:Risk Reports and ongoing capability reassessment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:ethics/FM-01", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FM-01", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:ethics/FM-01", "target": "clause:ibm_ai_fairness:Fairness metric computation (batch, schedulable on productio", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/FM-01", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/FM-01", "target": "clause:meta_llama_rai:System-level alignment \u2014 input/output mitigations; Llama Acc", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:ethics/FM-01", "target": "clause:microsoft_rai:F1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FM-01", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FM-01", "target": "clause:nist_rmf:MEASURE 2.11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FM-01", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/FM-01", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "adjacent" }, { "source": "control:ethics/FM-02", "target": "clause:anthropic_rsp:Capability Thresholds \u2014 threshold-triggered safeguard requir", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:ethics/FM-02", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FM-02", "target": "clause:eu_charter:21", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "direct" }, { "source": "control:ethics/FM-02", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/FM-02", "target": "clause:ibm_ai_fairness:Demographic parity difference and equalized odds difference", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:ethics/FM-02", "target": "clause:ieee_7000:Clause 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/FM-02", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibited", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:ethics/FM-02", "target": "clause:microsoft_rai:F1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FM-02", "target": "clause:microsoft_rai:F2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FM-02", "target": "clause:nist_rmf:GOVERN 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FM-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FM-03", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:ethics/FM-03", "target": "clause:ibm_ai_fairness:Fairness metric suite (demographic parity difference, equali", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:ethics/FM-03", "target": "clause:ieee_7000:\u00a77.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/FM-03", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance; Re", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/FM-03", "target": "clause:microsoft_rai:F1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FM-03", "target": "clause:microsoft_rai:F3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FM-03", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:ethics/FM-03", "target": "clause:nist_rmf:MEASURE 2.11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FM-03", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "adjacent" }, { "source": "control:ethics/FM-03", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "partial" }, { "source": "control:ethics/FM-04", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:ethics/FM-04", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/FM-04", "target": "clause:ieee_7000:Clause 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/FM-04", "target": "clause:iso_42001:8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/FM-04", "target": "clause:microsoft_rai:F1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FM-04", "target": "clause:microsoft_rai:F3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FM-04", "target": "clause:nist_rmf:MEASURE 2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FM-04", "target": "clause:oecd_ai_principles:Principle 1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/FM-05", "target": "clause:acm_ethics:\u00a71.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/FM-05", "target": "clause:eu_ai_act:73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FM-05", "target": "clause:eu_charter:21", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "partial" }, { "source": "control:ethics/FM-05", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/FM-05", "target": "clause:ibm_ai_fairness:Bias mitigation algorithms (reweighing, adversarial debiasin", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/FM-05", "target": "clause:iso_42001:10.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/FM-05", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms; Llama Acceptabl", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:ethics/FM-05", "target": "clause:microsoft_rai:RS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/FM-05", "target": "clause:nist_rmf:MANAGE 4.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FM-06", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FM-06", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/FM-06", "target": "clause:ibm_ai_fairness:Disaggregated (subgroup) performance metrics", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:ethics/FM-06", "target": "clause:meta_llama_rai:Model-level alignment \u2014 Evaluate and improve performance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/FM-06", "target": "clause:microsoft_rai:F1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/FM-06", "target": "clause:nist_rmf:MEASURE 2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FM-06", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "un_ethics_ai", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/FM-07", "target": "clause:acm_ethics:\u00a72.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/FM-07", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FM-07", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/FM-07", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/FM-07", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/FM-07", "target": "clause:nist_rmf:GOVERN 4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FM-08", "target": "clause:acm_ethics:\u00a72.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "adjacent" }, { "source": "control:ethics/FM-08", "target": "clause:anthropic_rsp:Governance and Transparency \u2014 Risk Reports", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:ethics/FM-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/FM-08", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/FM-08", "target": "clause:ieee_7000:Clause 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/FM-08", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/FM-08", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:ethics/FM-08", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/FM-08", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/FM-08", "target": "clause:nist_rmf:MEASURE 2.11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/FM-08", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/HI-01", "target": "clause:eu_ai_act:27", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/HI-01", "target": "clause:eu_charter:1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "direct" }, { "source": "control:ethics/HI-01", "target": "clause:ieee_7000:Clause 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/HI-01", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/HI-01", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/HI-01", "target": "clause:nist_rmf:MAP 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:ethics/HI-01", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/HI-02", "target": "clause:acm_ethics:\u00a71.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/HI-02", "target": "clause:eu_ai_act:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/HI-02", "target": "clause:eu_charter:1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "direct" }, { "source": "control:ethics/HI-02", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/HI-02", "target": "clause:ieee_7000:Clause 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/HI-02", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/HI-02", "target": "clause:microsoft_rai:T3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/HI-02", "target": "clause:oecd_ai_principles:Principle 1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/HI-02", "target": "clause:openai_model_spec:Stay in bounds \u2014 Don't facilitate the targeted manipulation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "direct" }, { "source": "control:ethics/HI-02", "target": "clause:un_ethics_ai:\u00b635\u2013\u00b636 (Human oversight and determination)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "un_ethics_ai", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/HI-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/HI-03", "target": "clause:eu_charter:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "direct" }, { "source": "control:ethics/HI-03", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/HI-03", "target": "clause:ibm_ai_fairness:Subgroup fairness metrics and bias mitigation algorithms", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/HI-03", "target": "clause:ieee_7000:Clause 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/HI-03", "target": "clause:meta_llama_rai:Responsible AI considerations (fairness and inclusion)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/HI-03", "target": "clause:microsoft_rai:I1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/HI-03", "target": "clause:nist_rmf:MEASURE 2.11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/HI-03", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/HI-03", "target": "clause:un_ethics_ai:\u00b628\u2013\u00b630 (Fairness and non-discrimination)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "un_ethics_ai", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/HI-04", "target": "clause:eu_ai_act:14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/HI-04", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/HI-04", "target": "clause:ieee_7000:Clause 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/HI-04", "target": "clause:iso_42001:8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/HI-04", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/HI-04", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:ethics/HI-04", "target": "clause:mitre:AML.M0029", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:ethics/HI-04", "target": "clause:mitre:AML.M0030", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:ethics/HI-04", "target": "clause:nist_rmf:GOVERN 3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/HI-04", "target": "clause:openai_model_spec:The chain of command", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/HI-04", "target": "clause:owasp_ai_exchange:oversight", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:ethics/HI-05", "target": "clause:eu_ai_act:85", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/HI-05", "target": "clause:eu_charter:47", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "direct" }, { "source": "control:ethics/HI-05", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/HI-05", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/HI-05", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/HI-05", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/HI-05", "target": "clause:nist_rmf:MANAGE 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:ethics/HI-05", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:ethics/HI-06", "target": "clause:eu_ai_act:50", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/HI-06", "target": "clause:eu_charter:8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "direct" }, { "source": "control:ethics/HI-06", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:ethics/HI-06", "target": "clause:ieee_7000:\u00a75.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/HI-06", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document); Build trans", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/HI-06", "target": "clause:microsoft_rai:T3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/HI-06", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/HI-06", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "direct" }, { "source": "control:ethics/HI-06", "target": "clause:owasp_ai_exchange:aitransparency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:ethics/HI-06", "target": "clause:un_ethics_ai:\u00b637 (Transparency)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "un_ethics_ai", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/HI-07", "target": "clause:eu_ai_act:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/HI-07", "target": "clause:eu_charter:24", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "direct" }, { "source": "control:ethics/HI-07", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 rigorous design, te", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/HI-07", "target": "clause:ieee_7000:Clause 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/HI-07", "target": "clause:meta_llama_rai:Llama Acceptable Use Policy (separate document) \u2014 prohibitio", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/HI-07", "target": "clause:microsoft_rai:RS1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/HI-07", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/HI-07", "target": "clause:openai_model_spec:Stay in bounds (prohibited sexual content involving minors);", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "direct" }, { "source": "control:ethics/HI-08", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/HI-08", "target": "clause:eu_charter:1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "adjacent" }, { "source": "control:ethics/HI-08", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/HI-08", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/HI-08", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/HI-08", "target": "clause:nist_rmf:GOVERN 4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/HI-08", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/XP-01", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/XP-01", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/XP-01", "target": "clause:ibm_ai_fairness:Bias metric selection (metric matched to task and fairness d", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "adjacent" }, { "source": "control:ethics/XP-01", "target": "clause:ieee_7000:Clause 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/XP-01", "target": "clause:iso_42001:8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/XP-01", "target": "clause:microsoft_rai:T1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/XP-01", "target": "clause:nist_rmf:MEASURE 2.9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/XP-01", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/XP-01", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/XP-01", "target": "clause:owasp_ai_exchange:explainability", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:ethics/XP-02", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/XP-02", "target": "clause:eu_ai_act:86", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/XP-02", "target": "clause:eu_charter:47", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "direct" }, { "source": "control:ethics/XP-02", "target": "clause:eu_charter:8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "direct" }, { "source": "control:ethics/XP-02", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/XP-02", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/XP-02", "target": "clause:microsoft_rai:T1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/XP-02", "target": "clause:microsoft_rai:T3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/XP-02", "target": "clause:nist_rmf:GOVERN 1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:ethics/XP-02", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:ethics/XP-02", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/XP-02", "target": "clause:owasp_ai_exchange:explainability", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:ethics/XP-02", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "un_ethics_ai", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/XP-03", "target": "clause:acm_ethics:\u00a72.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/XP-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:ethics/XP-03", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/XP-03", "target": "clause:ieee_7000:Clause 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:ethics/XP-03", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/XP-03", "target": "clause:microsoft_rai:T1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/XP-03", "target": "clause:nist_rmf:MEASURE 2.9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/XP-03", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/XP-03", "target": "clause:owasp_ai_exchange:explainability", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:ethics/XP-04", "target": "clause:eu_ai_act:86", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/XP-04", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 mitigating unintend", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/XP-04", "target": "clause:ibm_ai_fairness:Disparate impact metric", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/XP-04", "target": "clause:ieee_7000:Clause 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/XP-04", "target": "clause:iso_42001:8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/XP-04", "target": "clause:microsoft_rai:F1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/XP-04", "target": "clause:microsoft_rai:F2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/XP-04", "target": "clause:nist_rmf:GOVERN 1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/XP-04", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:ethics/XP-04", "target": "clause:openai_model_spec:Stay in bounds \u2014 Try to prevent imminent real-world harm", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "adjacent" }, { "source": "control:ethics/XP-05", "target": "clause:anthropic_rsp:Governance and Transparency (documentation and disclosure of", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "partial" }, { "source": "control:ethics/XP-05", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/XP-05", "target": "clause:eu_ai_act:Annex IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/XP-05", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/XP-05", "target": "clause:ibm_ai_fairness:Fairness metrics (demographic parity, equalized odds, dispar", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ibm_ai_fairness", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "adjacent" }, { "source": "control:ethics/XP-05", "target": "clause:iso_42001:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/XP-05", "target": "clause:meta_llama_rai:Build transparency and reporting mechanisms", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "meta_llama_rai", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/XP-05", "target": "clause:microsoft_rai:T2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/XP-05", "target": "clause:nist_rmf:MAP 5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/XP-05", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:ethics/XP-05", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/XP-05", "target": "clause:owasp_ai_exchange:aitransparency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:ethics/XP-06", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/XP-06", "target": "clause:eu_ai_act:86", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/XP-06", "target": "clause:eu_charter:47", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_charter", "relation": "satisfies", "source_version": "2012/C 326/02" }, "confidence": "direct" }, { "source": "control:ethics/XP-06", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/XP-06", "target": "clause:iso_42001:7.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:ethics/XP-06", "target": "clause:microsoft_rai:T1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/XP-06", "target": "clause:microsoft_rai:T2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/XP-06", "target": "clause:nist_rmf:MEASURE 2.9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/XP-06", "target": "clause:oecd_ai_principles:Principle 1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:ethics/XP-06", "target": "clause:openai_model_spec:Seek the truth together \u2014 Be honest and transparent", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_model_spec", "relation": "informs", "source_version": "2025-12-18" }, "confidence": "partial" }, { "source": "control:ethics/XP-06", "target": "clause:owasp_ai_exchange:explainability", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:ethics/XP-06", "target": "clause:un_ethics_ai:\u00b637\u2013\u00b641 (Transparency and explainability)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "un_ethics_ai", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/XP-07", "target": "clause:acm_ethics:\u00a73.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:ethics/XP-07", "target": "clause:eu_ai_act:72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/XP-07", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/XP-07", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/XP-07", "target": "clause:ieee_7000:Clause 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/XP-07", "target": "clause:iso_42001:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/XP-07", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/XP-07", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "partial" }, { "source": "control:ethics/XP-07", "target": "clause:nist_rmf:MEASURE 4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:ethics/XP-07", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:ethics/XP-07", "target": "clause:owasp_ai_exchange:explainability", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:ethics/XP-08", "target": "clause:acm_ethics:\u00a73.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "acm_ethics", "relation": "informs", "source_version": "2018" }, "confidence": "adjacent" }, { "source": "control:ethics/XP-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/XP-08", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/XP-08", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:ethics/XP-08", "target": "clause:google_ai_principles:Responsible development and deployment \u2014 appropriate human o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_ai_principles", "relation": "informs", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:ethics/XP-08", "target": "clause:ieee_7000:Clause 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ieee_7000", "relation": "informs", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:ethics/XP-08", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/XP-08", "target": "clause:iso_42001:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:ethics/XP-08", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/XP-08", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "v2 (2022)" }, "confidence": "direct" }, { "source": "control:ethics/XP-08", "target": "clause:nist_rmf:GOVERN 1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:ethics/XP-08", "target": "clause:oecd_ai_principles:Principle 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oecd_ai_principles", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:ethics/XP-09", "target": "clause:plot4ai:transparency-and-accessibility", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "plot4ai", "relation": "defends_against", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:finance/FC-01", "target": "clause:aws_financial:AWS Audit Manager", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-01", "target": "clause:coso_icfr:Principles 10-12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FC-01", "target": "clause:finra:Regulatory Notice 24-09 (GenAI and LLMs)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "finra", "relation": "satisfies", "source_version": "2024-06-27" }, "confidence": "partial" }, { "source": "control:finance/FC-01", "target": "clause:google_financial:Vertex AI Model Registry", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-01", "target": "clause:microsoft_rai:A3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FC-01", "target": "clause:okta_financial:Okta System Log", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FC-01", "target": "clause:omb_a_123:Section III.A", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "omb_a_123", "relation": "satisfies", "source_version": "2016" }, "confidence": "adjacent" }, { "source": "control:finance/FC-01", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-01", "target": "clause:pcaob_as_2201:\u00b6.14-.18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007 as amended" }, "confidence": "direct" }, { "source": "control:finance/FC-01", "target": "clause:sox:\u00a7302, \u00a7404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002 as amended" }, "confidence": "direct" }, { "source": "control:finance/FC-01", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "partial" }, { "source": "control:finance/FC-02", "target": "clause:aws_financial:AWS Artifact", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-02", "target": "clause:bcbs_239:Principle 2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/FC-02", "target": "clause:coso_icfr:Principle 6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FC-02", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:finance/FC-02", "target": "clause:eu_ai_act:Annex III", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:finance/FC-02", "target": "clause:google_financial:Explainable AI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-02", "target": "clause:microsoft_rai:T2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FC-02", "target": "clause:pcaob_as_2201:\u00b6.20", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007 as amended" }, "confidence": "direct" }, { "source": "control:finance/FC-02", "target": "clause:sec_ai:Proposed rule, Release 34-97990 (withdrawn 2025-06-12)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sec_ai", "relation": "satisfies", "source_version": "34-97990 (2023; withdrawn 2025)" }, "confidence": "adjacent" }, { "source": "control:finance/FC-02", "target": "clause:sox:\u00a7302(a)(4)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002 as amended" }, "confidence": "direct" }, { "source": "control:finance/FC-03", "target": "clause:aws_financial:AWS Audit Manager", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-03", "target": "clause:bcbs_239:Principle 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FC-03", "target": "clause:coso_icfr:Principles 10-11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FC-03", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-03", "target": "clause:microsoft_rai:RS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FC-03", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-03", "target": "clause:pcaob_as_2201:\u00b6.39-.40", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007 as amended" }, "confidence": "adjacent" }, { "source": "control:finance/FC-03", "target": "clause:soc2:CC6.1, CC7.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FC-03", "target": "clause:sox:\u00a7404(a)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002 as amended" }, "confidence": "direct" }, { "source": "control:finance/FC-04", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-04", "target": "clause:coso_icfr:Principle 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FC-04", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/FC-04", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/FC-04", "target": "clause:google_financial:Vertex AI Model Registry", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-04", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FC-04", "target": "clause:okta_financial:Okta Privileged Access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FC-04", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-04", "target": "clause:sox:\u00a7404(b)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002 as amended" }, "confidence": "direct" }, { "source": "control:finance/FC-04", "target": "clause:sr26_2:\u00a7V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FC-05", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-05", "target": "clause:coso_icfr:Principle 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FC-05", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/FC-05", "target": "clause:google_financial:Cloud IAM", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FC-05", "target": "clause:microsoft_rai:PS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FC-05", "target": "clause:okta_financial:Okta access management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-05", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-05", "target": "clause:sox:\u00a7404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002 as amended" }, "confidence": "direct" }, { "source": "control:finance/FC-06", "target": "clause:aws_financial:AWS CloudTrail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-06", "target": "clause:coso_icfr:Principles 16-17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FC-06", "target": "clause:eu_ai_act:73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/FC-06", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-06", "target": "clause:microsoft_rai:RS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FC-06", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-06", "target": "clause:soc2:CC7.4, CC7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FC-06", "target": "clause:sox:\u00a7302(a)(5)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002 as amended" }, "confidence": "direct" }, { "source": "control:finance/FC-06", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FC-07", "target": "clause:aws_financial:AWS CloudTrail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-07", "target": "clause:bcbs_239:Principles 2-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FC-07", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/FC-07", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-07", "target": "clause:microsoft_rai:RS1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FC-07", "target": "clause:okta_financial:Okta System Log", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FC-07", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-07", "target": "clause:soc2:CC6.6, CC6.7, CC7.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:finance/FC-07", "target": "clause:sox:\u00a7404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002 as amended" }, "confidence": "direct" }, { "source": "control:finance/FC-07", "target": "clause:sr26_2:\u00a7IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FC-08", "target": "clause:aws_financial:AWS Artifact", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-08", "target": "clause:coso_icfr:Principle 17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FC-08", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/FC-08", "target": "clause:eu_ai_act:Annex IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/FC-08", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-08", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FC-08", "target": "clause:okta_financial:Okta System Log", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FC-08", "target": "clause:omb_a_123:Section IV.A", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "omb_a_123", "relation": "satisfies", "source_version": "2016" }, "confidence": "adjacent" }, { "source": "control:finance/FC-08", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FC-08", "target": "clause:pcaob_as_2201:\u00b6.72-.76", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007 as amended" }, "confidence": "direct" }, { "source": "control:finance/FC-08", "target": "clause:soc2:CC4.1, CC4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "adjacent" }, { "source": "control:finance/FC-08", "target": "clause:sox:\u00a7302, \u00a7404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002 as amended" }, "confidence": "direct" }, { "source": "control:finance/FD-01", "target": "clause:aws_financial:AWS CloudTrail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-01", "target": "clause:bcbs_239:Principle 2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/FD-01", "target": "clause:coso_icfr:Component 3 \u2014 Control Activities", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FD-01", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FD-01", "target": "clause:google_financial:Explainable AI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-01", "target": "clause:microsoft_rai:T1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FD-01", "target": "clause:okta_financial:Okta System Log", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FD-01", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-01", "target": "clause:sox:Section 302", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/FD-02", "target": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-02", "target": "clause:cfpb_ai:Circular 2022-03 \u2014 adverse action for credit decisions based", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cfpb_ai", "relation": "satisfies", "source_version": "2022-03" }, "confidence": "direct" }, { "source": "control:finance/FD-02", "target": "clause:coso_icfr:Component 2 \u2014 Risk Assessment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FD-02", "target": "clause:eu_ai_act:86", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FD-02", "target": "clause:google_financial:Explainable AI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-02", "target": "clause:microsoft_rai:F1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FD-02", "target": "clause:microsoft_rai:F2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FD-03", "target": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-03", "target": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/FD-03", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FD-03", "target": "clause:google_financial:Explainable AI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-03", "target": "clause:microsoft_rai:F2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FD-04", "target": "clause:aws_financial:AWS Artifact", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-04", "target": "clause:bcbs_239:Principle 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/FD-04", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FD-04", "target": "clause:omb_a_123:Section IV.A", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "omb_a_123", "relation": "satisfies", "source_version": "2016" }, "confidence": "adjacent" }, { "source": "control:finance/FD-04", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-04", "target": "clause:sox:Section 404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "partial" }, { "source": "control:finance/FD-04", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FD-05", "target": "clause:coso_icfr:Component 1 \u2014 Control Environment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "adjacent" }, { "source": "control:finance/FD-05", "target": "clause:eu_ai_act:50", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FD-05", "target": "clause:microsoft_rai:T3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FD-05", "target": "clause:soc2:P1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:finance/FD-06", "target": "clause:aws_financial:AWS Audit Manager", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-06", "target": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FD-06", "target": "clause:eu_ai_act:53", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/FD-06", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-06", "target": "clause:microsoft_rai:T2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FD-06", "target": "clause:soc2:CC2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FD-06", "target": "clause:sox:Section 302 & 404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/FD-07", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FD-07", "target": "clause:bcbs_239:Principle 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FD-07", "target": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FD-07", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/FD-07", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-07", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FD-07", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-07", "target": "clause:sox:Section 302", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/FD-07", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FD-08", "target": "clause:aws_financial:AWS Artifact", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-08", "target": "clause:coso_icfr:Component 5 \u2014 Monitoring Activities", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FD-08", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FD-08", "target": "clause:google_financial:Model Cards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-08", "target": "clause:microsoft_rai:T2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FD-08", "target": "clause:okta_financial:Okta System Log", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-08", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FD-08", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007" }, "confidence": "direct" }, { "source": "control:finance/FD-08", "target": "clause:soc2:CC4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FD-08", "target": "clause:sox:Section 302 & 404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/FD-08", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FG-01", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-01", "target": "clause:coso_icfr:Principle 2 \u2014 Control Environment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FG-01", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FG-01", "target": "clause:google_financial:Vertex AI Model Registry", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-01", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FG-01", "target": "clause:omb_a_123:Section II.A", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "omb_a_123", "relation": "satisfies", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:finance/FG-01", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-01", "target": "clause:sox:\u00a7404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/FG-01", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FG-02", "target": "clause:aws_financial:AWS Audit Manager", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-02", "target": "clause:coso_icfr:Principle 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FG-02", "target": "clause:eu_ai_act:16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FG-02", "target": "clause:google_financial:Vertex AI Model Registry", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-02", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FG-02", "target": "clause:okta_financial:Okta System Log", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FG-02", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-02", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007" }, "confidence": "partial" }, { "source": "control:finance/FG-02", "target": "clause:sox:\u00a7302", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/FG-02", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FG-03", "target": "clause:aws_financial:AWS Audit Manager", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-03", "target": "clause:coso_icfr:Principle 2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FG-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FG-03", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-03", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FG-03", "target": "clause:omb_a_123:Section III.A", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "omb_a_123", "relation": "satisfies", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:finance/FG-03", "target": "clause:sox:\u00a7301", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/FG-03", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FG-04", "target": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-04", "target": "clause:eu_ai_act:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FG-04", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-04", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-05", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-05", "target": "clause:bcbs_239:Principle 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "adjacent" }, { "source": "control:finance/FG-05", "target": "clause:eu_ai_act:73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FG-05", "target": "clause:microsoft_rai:RS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FG-05", "target": "clause:okta_financial:Okta System Log", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-05", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-05", "target": "clause:soc2:CC7.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:finance/FG-05", "target": "clause:sox:\u00a7302", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "partial" }, { "source": "control:finance/FG-06", "target": "clause:aws_financial:AWS Audit Manager", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-06", "target": "clause:bcbs_239:Principle 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/FG-06", "target": "clause:coso_icfr:Principle 16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FG-06", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-06", "target": "clause:microsoft_rai:T2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FG-06", "target": "clause:omb_a_123:Section VI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "omb_a_123", "relation": "satisfies", "source_version": "2016" }, "confidence": "adjacent" }, { "source": "control:finance/FG-06", "target": "clause:sox:\u00a7404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "partial" }, { "source": "control:finance/FG-06", "target": "clause:sr26_2:\u00a7VI (Roles and Responsibilities)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FG-07", "target": "clause:aws_financial:AWS Artifact", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-07", "target": "clause:coso_icfr:Principle 17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FG-07", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FG-07", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-07", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FG-07", "target": "clause:omb_a_123:Section VI.A", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "omb_a_123", "relation": "satisfies", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:finance/FG-07", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007" }, "confidence": "partial" }, { "source": "control:finance/FG-07", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FG-08", "target": "clause:aws_financial:AWS Artifact", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-08", "target": "clause:coso_icfr:Principle 16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "adjacent" }, { "source": "control:finance/FG-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FG-08", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-08", "target": "clause:microsoft_rai:T2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FG-08", "target": "clause:okta_financial:Okta System Log", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FG-08", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FG-08", "target": "clause:pcaob_as_2201:\u00b6.68-.76", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007" }, "confidence": "direct" }, { "source": "control:finance/FG-08", "target": "clause:soc2:CC2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FG-08", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/FG-08", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FP-01", "target": "clause:aws_financial:AWS Audit Manager", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FP-01", "target": "clause:coso_icfr:Principle 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FP-01", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FP-01", "target": "clause:google_financial:Vertex AI Model Registry", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FP-01", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FP-01", "target": "clause:sox:Section 302 & 404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/FP-01", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FP-02", "target": "clause:anthropic_rsp:Usage Policy (separate document) \u2014 restricted high-risk uses", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:finance/FP-02", "target": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FP-02", "target": "clause:eu_ai_act:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FP-02", "target": "clause:eu_ai_act:Annex III", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FP-02", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FP-02", "target": "clause:microsoft_rai:A3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FP-02", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FP-02", "target": "clause:sox:Section 404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "partial" }, { "source": "control:finance/FP-02", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FP-03", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FP-03", "target": "clause:coso_icfr:Principle 6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FP-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/FP-03", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FP-03", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FP-03", "target": "clause:omb_a_123:Section II.B", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "omb_a_123", "relation": "satisfies", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:finance/FP-03", "target": "clause:sox:Section 302", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "partial" }, { "source": "control:finance/FP-03", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FP-04", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:finance/FP-04", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:finance/FP-04", "target": "clause:eu_ai_act:25", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FP-04", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:finance/FP-04", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FP-04", "target": "clause:okta_financial:Okta Adaptive MFA", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FP-04", "target": "clause:openai_enterprise:Data Processing Addendum", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FP-04", "target": "clause:soc2:CC9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:finance/FP-04", "target": "clause:sox:Section 404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "partial" }, { "source": "control:finance/FP-04", "target": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FP-05", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FP-05", "target": "clause:bcbs_239:Principles 2 & 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FP-05", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FP-05", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FP-05", "target": "clause:microsoft_rai:F1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FP-05", "target": "clause:microsoft_rai:F3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FP-05", "target": "clause:soc2:PI1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FP-05", "target": "clause:sr26_2:\u00a7IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FP-06", "target": "clause:aws_financial:AWS Audit Manager", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FP-06", "target": "clause:coso_icfr:Principle 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FP-06", "target": "clause:eu_ai_act:43", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/FP-06", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/FP-06", "target": "clause:google_financial:Vertex AI Model Registry", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FP-06", "target": "clause:microsoft_rai:RS2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FP-06", "target": "clause:okta_financial:Okta Privileged Access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FP-06", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FP-06", "target": "clause:sox:Section 404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/FP-06", "target": "clause:sr26_2:\u00a7V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FP-07", "target": "clause:coso_icfr:Principle 14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FP-07", "target": "clause:eu_ai_act:14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FP-07", "target": "clause:google_financial:Explainable AI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FP-07", "target": "clause:microsoft_rai:A5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FP-07", "target": "clause:okta_financial:Okta System Log", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FP-07", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FP-07", "target": "clause:sox:Section 302", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "partial" }, { "source": "control:finance/FP-07", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/FP-08", "target": "clause:aws_financial:AWS Artifact", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FP-08", "target": "clause:coso_icfr:Principle 17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/FP-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/FP-08", "target": "clause:google_financial:Model Cards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/FP-08", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/FP-08", "target": "clause:okta_financial:Okta System Log", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FP-08", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/FP-08", "target": "clause:pcaob_as_2201:\u00b6.39-.42", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007" }, "confidence": "direct" }, { "source": "control:finance/FP-08", "target": "clause:soc2:CC2.2 & CC4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/FP-08", "target": "clause:sox:Section 404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/FP-08", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "partial" }, { "source": "control:finance/MR-01", "target": "clause:aws_financial:AWS Audit Manager", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/MR-01", "target": "clause:bcbs_239:Principle 2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/MR-01", "target": "clause:coso_icfr:Component 2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/MR-01", "target": "clause:eu_ai_act:49", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/MR-01", "target": "clause:google_financial:Vertex AI Model Registry", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MR-01", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/MR-01", "target": "clause:occ_ai:Model Risk Management booklet (2021)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "occ_ai", "relation": "satisfies", "source_version": "1.0 (2021-08)" }, "confidence": "direct" }, { "source": "control:finance/MR-01", "target": "clause:sox:\u00a7404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "adjacent" }, { "source": "control:finance/MR-01", "target": "clause:sr26_2:\u00a7VI (Model Inventory)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MR-02", "target": "clause:aws_financial:AWS User Guide to Financial Services Regulations & Guideline", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/MR-02", "target": "clause:coso_icfr:Component 1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/MR-02", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/MR-02", "target": "clause:ffiec:IT Handbook \u2014 Development, Acquisition, and Maintenance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ffiec", "relation": "satisfies", "source_version": "2024-08" }, "confidence": "direct" }, { "source": "control:finance/MR-02", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MR-02", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/MR-02", "target": "clause:omb_a_123:Section II.A", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "omb_a_123", "relation": "satisfies", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:finance/MR-02", "target": "clause:sox:\u00a7302", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "adjacent" }, { "source": "control:finance/MR-02", "target": "clause:sr26_2:\u00a7VI (Governance and Controls)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MR-03", "target": "clause:aws_financial:AWS Artifact", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/MR-03", "target": "clause:bcbs_239:Principle 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/MR-03", "target": "clause:coso_icfr:Component 2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/MR-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/MR-03", "target": "clause:google_financial:Explainable AI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MR-03", "target": "clause:microsoft_rai:RS1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/MR-03", "target": "clause:pcaob_as_2201:\u00b6.39", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007" }, "confidence": "adjacent" }, { "source": "control:finance/MR-03", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MR-04", "target": "clause:coso_icfr:Component 2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/MR-04", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/MR-04", "target": "clause:google_financial:Model Cards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MR-04", "target": "clause:microsoft_rai:A1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/MR-04", "target": "clause:omb_a_123:Section II.B", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "omb_a_123", "relation": "satisfies", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:finance/MR-04", "target": "clause:sox:\u00a7404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "adjacent" }, { "source": "control:finance/MR-04", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MR-05", "target": "clause:aws_financial:AWS CloudTrail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/MR-05", "target": "clause:bcbs_239:Principle 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/MR-05", "target": "clause:eu_ai_act:72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/MR-05", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MR-05", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "adjacent" }, { "source": "control:finance/MR-05", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MR-05", "target": "clause:soc2:CC7.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/MR-05", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MR-06", "target": "clause:anthropic_rsp:Capability Thresholds and Required Safeguards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:finance/MR-06", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MR-06", "target": "clause:eu_ai_act:25", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/MR-06", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MR-06", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/MR-06", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MR-06", "target": "clause:sr26_2:\u00a7VII (Vendor and Third-Party)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MR-07", "target": "clause:anthropic_rsp:Capability assessments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:finance/MR-07", "target": "clause:coso_icfr:Component 2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "adjacent" }, { "source": "control:finance/MR-07", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/MR-07", "target": "clause:google_financial:Model Cards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MR-07", "target": "clause:microsoft_rai:T1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/MR-07", "target": "clause:microsoft_rai:T3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/MR-07", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/MR-07", "target": "clause:sr26_2:\u00a7III (Overview of Model Risk and MRM)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MR-08", "target": "clause:aws_financial:AWS Artifact", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MR-08", "target": "clause:bcbs_239:Principle 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "adjacent" }, { "source": "control:finance/MR-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/MR-08", "target": "clause:google_financial:Google Cloud compliance offerings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MR-08", "target": "clause:microsoft_rai:T2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/MR-08", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MR-08", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007" }, "confidence": "direct" }, { "source": "control:finance/MR-08", "target": "clause:soc2:CC4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/MR-08", "target": "clause:sox:\u00a7404(b)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/MR-08", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MV-01", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-01", "target": "clause:coso_icfr:Principle 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/MV-01", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/MV-01", "target": "clause:google_financial:Vertex AI Model Registry", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-01", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/MV-01", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-01", "target": "clause:pcaob_as_2201:\u00b6.24-.28", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007" }, "confidence": "adjacent" }, { "source": "control:finance/MV-01", "target": "clause:sox:\u00a7404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "partial" }, { "source": "control:finance/MV-01", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MV-02", "target": "clause:aws_financial:AWS Artifact", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-02", "target": "clause:bcbs_239:Principle 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/MV-02", "target": "clause:coso_icfr:Principle 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "adjacent" }, { "source": "control:finance/MV-02", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/MV-02", "target": "clause:google_financial:Explainable AI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-02", "target": "clause:microsoft_rai:RS1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "adjacent" }, { "source": "control:finance/MV-02", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MV-03", "target": "clause:aws_financial:AWS Artifact", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-03", "target": "clause:bcbs_239:Principle 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/MV-03", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/MV-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/MV-03", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-03", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/MV-03", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-03", "target": "clause:soc2:CC7.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "adjacent" }, { "source": "control:finance/MV-03", "target": "clause:sox:\u00a7302", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "partial" }, { "source": "control:finance/MV-03", "target": "clause:sr26_2:\u00a7V (Outcomes Analysis)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MV-04", "target": "clause:anthropic_rsp:Capability Thresholds", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:finance/MV-04", "target": "clause:bcbs_239:Principle 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/MV-04", "target": "clause:coso_icfr:Principle 16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "adjacent" }, { "source": "control:finance/MV-04", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/MV-04", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-04", "target": "clause:microsoft_rai:RS1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "adjacent" }, { "source": "control:finance/MV-04", "target": "clause:sr26_2:\u00a7V (Conceptual Soundness)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MV-05", "target": "clause:aws_financial:AWS Audit Manager", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-05", "target": "clause:bcbs_239:Principle 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "adjacent" }, { "source": "control:finance/MV-05", "target": "clause:coso_icfr:Principle 16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/MV-05", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/MV-05", "target": "clause:google_financial:Vertex AI Model Monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-05", "target": "clause:microsoft_rai:RS3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/MV-05", "target": "clause:openai_enterprise:API model versioning & deprecation policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-05", "target": "clause:soc2:CC4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/MV-05", "target": "clause:sr26_2:\u00a7V (Ongoing Model Monitoring)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MV-06", "target": "clause:anthropic_rsp:Capability assessment methodology", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:finance/MV-06", "target": "clause:aws_financial:Financial Services Industry Lens \u2014 AWS Well-Architected", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-06", "target": "clause:bcbs_239:Principle 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/MV-06", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/MV-06", "target": "clause:google_financial:Explainable AI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:finance/MV-06", "target": "clause:microsoft_rai:RS1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/MV-06", "target": "clause:openai_enterprise:Zero data retention (API)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-06", "target": "clause:sr26_2:\u00a7V (Validation and Monitoring)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "partial" }, { "source": "control:finance/MV-07", "target": "clause:aws_financial:AWS Audit Manager", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-07", "target": "clause:coso_icfr:Principle 17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "coso_icfr", "relation": "informs", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:finance/MV-07", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:finance/MV-07", "target": "clause:google_financial:Vertex AI Model Registry", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-07", "target": "clause:microsoft_rai:A2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/MV-07", "target": "clause:openai_enterprise:Enterprise privacy \u2014 compliance commitments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:finance/MV-07", "target": "clause:pcaob_as_2201:\u00b6.62-.70", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007" }, "confidence": "partial" }, { "source": "control:finance/MV-07", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/MV-07", "target": "clause:sr26_2:\u00a7V + \u00a7VI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:finance/MV-08", "target": "clause:aws_financial:AWS Artifact", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-08", "target": "clause:bcbs_239:Principle 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "bcbs_239", "relation": "satisfies", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:finance/MV-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:finance/MV-08", "target": "clause:google_financial:Model Cards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_financial", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-08", "target": "clause:microsoft_rai:T2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": "2" }, "confidence": "partial" }, { "source": "control:finance/MV-08", "target": "clause:openai_enterprise:Enterprise Compliance API \u2014 audit logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_enterprise", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:finance/MV-08", "target": "clause:pcaob_as_2201:\u00b6.46", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pcaob_as_2201", "relation": "equivalent_to", "source_version": "2007" }, "confidence": "direct" }, { "source": "control:finance/MV-08", "target": "clause:soc2:CC2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "soc2", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:finance/MV-08", "target": "clause:sox:\u00a7302 & \u00a7404", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sox", "relation": "satisfies", "source_version": "2002" }, "confidence": "direct" }, { "source": "control:finance/MV-08", "target": "clause:sr26_2:\u00a7VI (Documentation)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr26_2", "relation": "satisfies", "source_version": "2026-04-17" }, "confidence": "direct" }, { "source": "control:identity/DE-01", "target": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance; Part IV Phase 6 \u2014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/DE-01", "target": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Chaining", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/DE-01", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/DE-01", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:identity/DE-01", "target": "clause:nist_zt:Tenet 4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:identity/DE-01", "target": "clause:oauth_bcp:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oauth_bcp", "relation": "equivalent_to", "source_version": "RFC 9700" }, "confidence": "direct" }, { "source": "control:identity/DE-01", "target": "clause:oauth_bcp:\u00a72.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oauth_bcp", "relation": "equivalent_to", "source_version": "RFC 9700" }, "confidence": "direct" }, { "source": "control:identity/DE-01", "target": "clause:openid:RFC 9396 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openid", "relation": "equivalent_to", "source_version": "RFC 9396" }, "confidence": "direct" }, { "source": "control:identity/DE-01", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core delegation chain", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/DE-02", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/DE-02", "target": "clause:aws_iam:AWS IAM \u2014 Permission Boundaries", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/DE-02", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/DE-02", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:identity/DE-02", "target": "clause:nist_zt:Tenet 6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:identity/DE-02", "target": "clause:okta_iam:Okta Authorization Server \u2014 Scope Boundary Enforcement", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/DE-02", "target": "clause:openid:RFC 9396 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openid", "relation": "equivalent_to", "source_version": "RFC 9396" }, "confidence": "direct" }, { "source": "control:identity/DE-02", "target": "clause:ping_identity:PingFederate \u2014 Scope Reduction Enforcement", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/DE-03", "target": "clause:anthropic_zt_agents:Part II \u2014 Unscoped privilege inheritance (manager to worker", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/DE-03", "target": "clause:aws_iam:AWS STS \u2014 Role Chaining Session Policy", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/DE-03", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/DE-03", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/DE-03", "target": "clause:nist_zt:Tenet 4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/DE-03", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Delegation Depth Limit", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/DE-04", "target": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Dynamic privilege adjustment b", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/DE-04", "target": "clause:aws_iam:AWS STS \u2014 Session Policies Task Scoped", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/DE-04", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/DE-04", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/DE-04", "target": "clause:nist_zt:Tenet 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/DE-04", "target": "clause:okta_iam:Okta Cross App Access \u2014 task-scoped resource tokens (RFC 869", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/DE-04", "target": "clause:openid:RFC 9396 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openid", "relation": "equivalent_to", "source_version": "RFC 9396" }, "confidence": "direct" }, { "source": "control:identity/DE-05", "target": "clause:anthropic_rsp:Claude's Constitution \u2014 operator and user permission hierarc", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:identity/DE-05", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part II \u2014 Unscoped pr", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/DE-05", "target": "clause:nist_800_63:SP 800-63A-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/DE-05", "target": "clause:okta_iam:Okta OAuth \u2014 User Consent Framework", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/DE-05", "target": "clause:openid:RFC 9396 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openid", "relation": "equivalent_to", "source_version": "RFC 9396" }, "confidence": "partial" }, { "source": "control:identity/DE-06", "target": "clause:aws_iam:AWS IAM \u2014 Cross Account Trust Policies", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/DE-06", "target": "clause:eidas2:6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eidas2", "relation": "satisfies", "source_version": "2024/1183" }, "confidence": "adjacent" }, { "source": "control:identity/DE-06", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:identity/DE-06", "target": "clause:nist_800_63:SP 800-63C-4 \u00a73.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/DE-06", "target": "clause:ping_identity:Ping Identity \u2014 Federated Cross Org Authorization", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/DE-07", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/DE-07", "target": "clause:aws_iam:AWS CloudTrail \u2014 Assume Role Audit Trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/DE-07", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:identity/DE-07", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:identity/DE-07", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:identity/DE-07", "target": "clause:nist_zt:Tenet 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:identity/DE-07", "target": "clause:okta_iam:Okta System Log \u2014 Token Exchange Audit", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/DE-08", "target": "clause:aws_iam:AWS IAM \u2014 Role Session Revocation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/DE-08", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/DE-08", "target": "clause:okta_iam:Okta OAuth \u2014 Token Revocation Propagation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/DE-08", "target": "clause:openid:RFC 9396 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openid", "relation": "equivalent_to", "source_version": "RFC 9396" }, "confidence": "adjacent" }, { "source": "control:identity/DE-08", "target": "clause:scim:RFC7644 \u00a73.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "scim", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:identity/DE-09", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:identity/DE-09", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:identity/DE-09", "target": "clause:nist_rmf:GOVERN 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IC-01", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/IC-01", "target": "clause:cisa_zt:Governance (cross-cutting capability)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-01", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-01", "target": "clause:nist_800_63:SP 800-63-4 \u00a73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-01", "target": "clause:okta_iam:Okta Identity Governance \u2014 Governance Structure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IC-01", "target": "clause:ping_identity:Ping Identity for AI \u2014 Governance Capabilities", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IC-02", "target": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL Deployment and Security Standards", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:identity/IC-02", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Documented acceptable use", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/IC-02", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-02", "target": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-02", "target": "clause:nist_zt:\u00a73.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-02", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 safeguards for High-capability d", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_sf", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:identity/IC-03", "target": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (Review and certify permissions", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/IC-03", "target": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Continuous Access Review", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IC-03", "target": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-03", "target": "clause:okta_iam:Okta Access Certifications \u2014 Service Account Reviews", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-03", "target": "clause:scim:RFC 7644 \u00a73.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "scim", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IC-04", "target": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 ASL-3 Security Standard", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:identity/IC-04", "target": "clause:anthropic_zt_agents:Part III \u2014 Privilege scoping (JIT/JEA, dynamic elevation); P", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/IC-04", "target": "clause:aws_iam:AWS IAM \u2014 Privileged Role MFA Condition", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IC-04", "target": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-04", "target": "clause:nist_zt:\u00a75.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-04", "target": "clause:okta_iam:Okta Privileged Access \u2014 Zero Standing Privilege", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-04", "target": "clause:openid:RFC 9449", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openid", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-05", "target": "clause:anthropic_rsp:Anthropic RSP v3.3 \u2014 Risk Reports", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:identity/IC-05", "target": "clause:anthropic_zt_agents:Part I \u2014 Regulated industries and compliance requirements; P", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/IC-05", "target": "clause:eidas2:Regulation (EU) 2024/1183", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eidas2", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IC-05", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-05", "target": "clause:nist_800_63:SP 800-63-4 \u00a73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-05", "target": "clause:openai_sf:Preparedness Framework v2 \u2014 'Building trust' public disclosu", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_sf", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:identity/IC-06", "target": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/IC-06", "target": "clause:eidas2:20", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eidas2", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IC-06", "target": "clause:nist_800_63:SP 800-63C-4 \u00a73.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-06", "target": "clause:okta_iam:Okta trust page (trust.okta.com) \u2014 third-party audit certifi", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IC-06", "target": "clause:openid:OpenID Connect Core 1.0 \u00a73.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openid", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-06", "target": "clause:ping_identity:Ping Identity compliance certifications (SOC 2 Type II, ISO", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IC-07", "target": "clause:anthropic_zt_agents:Part IV Phase 8 \u2014 Measure what matters (Dwell time and cover", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/IC-07", "target": "clause:aws_iam:AWS Security Hub \u2014 Identity Security Metrics", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IC-07", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-07", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-07", "target": "clause:okta_iam:Okta Identity Governance \u2014 Program Metrics", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IC-08", "target": "clause:anthropic_rsp:Anthropic Transparency Hub \u2014 Model Reports", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:identity/IC-08", "target": "clause:nist_800_63:SP 800-63-4 \u00a73.4.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-08", "target": "clause:okta_iam:Okta Identity Governance \u2014 Attestation Evidence", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IC-08", "target": "clause:openai_sf:OpenAI Enterprise Compliance API \u2014 audit and auth log export", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_sf", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:identity/IC-08", "target": "clause:openid:RFC 9396", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openid", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IC-08", "target": "clause:w3c_did:\u00a75.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_did", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IF-01", "target": "clause:aws_iam:AWS IAM \u2014 Identity Provider Federation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IF-01", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:identity/IF-01", "target": "clause:eidas2:19a", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eidas2", "relation": "satisfies", "source_version": "2024/1183" }, "confidence": "direct" }, { "source": "control:identity/IF-01", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/IF-01", "target": "clause:oidc_federation:\u00a79", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "oidc_federation", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IF-01", "target": "clause:okta_iam:Okta Universal Directory \u2014 Federation Trust Config", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IF-01", "target": "clause:ping_identity:Ping Identity Runtime Identity \u2014 Trust Framework", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IF-02", "target": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (OAuth 2.0); Part IV Phase", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/IF-02", "target": "clause:fapi_2_0:\u00a75.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "fapi_2_0", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/IF-02", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/IF-02", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:identity/IF-02", "target": "clause:nist_zt:Tenet 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:identity/IF-02", "target": "clause:okta_iam:Okta OIDC \u2014 Dynamic Client Registration", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IF-02", "target": "clause:openid:RFC 9396", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openid", "relation": "equivalent_to", "source_version": "RFC 9396" }, "confidence": "direct" }, { "source": "control:identity/IF-02", "target": "clause:ping_identity:PingFederate \u2014 OIDC Audience Validation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IF-03", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/IF-03", "target": "clause:aws_iam:AWS IAM \u2014 Cross Account Role Assume Conditions", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IF-03", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:identity/IF-03", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/IF-03", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IF-03", "target": "clause:nist_zt:Tenet 6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IF-03", "target": "clause:ping_identity:Ping Identity \u2014 Cross Organization Agent Auth", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IF-04", "target": "clause:eidas2:5a", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eidas2", "relation": "satisfies", "source_version": "2024/1183" }, "confidence": "adjacent" }, { "source": "control:identity/IF-04", "target": "clause:google_saif:Google Cloud WIF \u2014 External OIDC Verification", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:identity/IF-04", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/IF-04", "target": "clause:ping_identity:PingOne Credentials \u2014 W3C Verifiable Credentials / DID", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IF-04", "target": "clause:w3c_did:\u00a74", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_did", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IF-04", "target": "clause:w3c_did:\u00a75", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_did", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IF-05", "target": "clause:eidas2:45b", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eidas2", "relation": "satisfies", "source_version": "2024/1183" }, "confidence": "direct" }, { "source": "control:identity/IF-05", "target": "clause:nist_800_63:SP 800-63C-4 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "adjacent" }, { "source": "control:identity/IF-05", "target": "clause:ping_identity:PingOne Credentials \u2014 eIDAS 2.0-aligned verifiable credentia", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IF-05", "target": "clause:w3c_did:\u00a74", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_did", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:identity/IF-05", "target": "clause:w3c_did:\u00a75", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_did", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:identity/IF-06", "target": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (token-based authenticatio", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/IF-06", "target": "clause:nist_800_63:SP 800-63C-4 \u00a73.15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/IF-06", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IF-06", "target": "clause:nist_zt:Tenet 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IF-06", "target": "clause:okta_iam:Okta OAuth \u2014 DPoP token binding (RFC 9449)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IF-06", "target": "clause:openid:RFC 9396 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openid", "relation": "equivalent_to", "source_version": "RFC 9396" }, "confidence": "direct" }, { "source": "control:identity/IF-06", "target": "clause:openid:RFC 9449", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openid", "relation": "equivalent_to", "source_version": "RFC 9449" }, "confidence": "direct" }, { "source": "control:identity/IF-07", "target": "clause:aws_iam:AWS IAM \u2014 Regional STS Endpoints", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:identity/IF-07", "target": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:identity/IF-07", "target": "clause:nist_800_63:SP 800-63B-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/IF-07", "target": "clause:nist_zt:\u00a73.4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IF-07", "target": "clause:okta_iam:Okta \u2014 Multi Region Resilience", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:identity/IF-08", "target": "clause:aws_iam:AWS CloudTrail \u2014 Organization Trail", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IF-08", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/IF-08", "target": "clause:google_saif:Google Cloud Audit Logs \u2014 Organization Log Sink", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IF-08", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:identity/IF-08", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IF-08", "target": "clause:nist_zt:Tenet 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IF-09", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:identity/IF-09", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:identity/IF-09", "target": "clause:nist_rmf:GOVERN 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/II-01", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification (persistent agent IDs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/II-01", "target": "clause:aws_iam:AWS IAM Best Practices \u2014 Use Roles Not Users", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/II-01", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/II-01", "target": "clause:nist_800_63:SP 800-63-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/II-01", "target": "clause:okta_iam:Okta for AI Agents \u2014 Agent Registry", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/II-01", "target": "clause:owasp_nhi10:NHI1:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_nhi10", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:identity/II-01", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/II-01", "target": "clause:scim:RFC 7644 \u00a73.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "scim", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/II-02", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Foundation/Ent", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/II-02", "target": "clause:aws_iam:AWS Well-Architected Security Pillar \u2014 SEC02 (identity and a", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/II-02", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/II-02", "target": "clause:google_saif:Google SAIF \u2014 Expand strong security foundations (least-priv", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:identity/II-02", "target": "clause:nist_800_63:SP 800-63-4 \u00a73.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/II-02", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:identity/II-02", "target": "clause:nist_zt:Tenet 4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:identity/II-02", "target": "clause:okta_iam:Okta for AI Agents \u2014 Assurance Levels", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/II-03", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Unique cryptog", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/II-03", "target": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 Certificate Binding", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/II-03", "target": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Keyless Authenti", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/II-03", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/II-03", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/II-03", "target": "clause:nist_zt:Tenet 6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/II-03", "target": "clause:ping_identity:PingOne Credentials \u2014 Verifiable Credentials", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/II-04", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (Advanced: hard", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/II-04", "target": "clause:aws_iam:AWS IAM Roles Anywhere \u2014 HSM Integration", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/II-04", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "supporting" }, { "source": "control:identity/II-04", "target": "clause:google_saif:Google Cloud IAM \u2014 HSM Service Account Keys", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/II-04", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73.1.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/II-05", "target": "clause:anthropic_zt_agents:Part II \u2014 Identity and privilege abuse (agents operate with", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/II-05", "target": "clause:aws_iam:AWS IAM Best Practices \u2014 Separate Human Workload Identity", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/II-05", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "supporting" }, { "source": "control:identity/II-05", "target": "clause:google_saif:Google Cloud IAM \u2014 Dedicated Service Accounts", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/II-05", "target": "clause:iso_24760:7.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:identity/II-05", "target": "clause:nist_800_63:SP 800-63-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/II-05", "target": "clause:okta_iam:Okta Universal Directory \u2014 Human NHI Separation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/II-06", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/II-06", "target": "clause:aws_iam:AWS IAM Tagging \u2014 Resource Owner Tags", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/II-06", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:identity/II-06", "target": "clause:nist_800_63:SP 800-63-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/II-06", "target": "clause:okta_iam:Okta for AI Agents \u2014 Owner Binding", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/II-06", "target": "clause:scim:RFC 7643 \u00a74.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "scim", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "supporting" }, { "source": "control:identity/II-07", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Approved/prohibited actions; Part IV Phase", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/II-07", "target": "clause:aws_iam:AWS IAM Tagging \u2014 Principal Tags", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:identity/II-07", "target": "clause:nist_800_63:SP 800-63-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/II-07", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:identity/II-07", "target": "clause:nist_zt:Tenet 1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:identity/II-07", "target": "clause:okta_iam:Okta for AI Agents \u2014 Capability Manifest", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/II-08", "target": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/II-08", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "supporting" }, { "source": "control:identity/II-08", "target": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Admin Activity", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/II-08", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:identity/II-08", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/II-08", "target": "clause:nist_zt:Tenet 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-01", "target": "clause:aws_iam:AWS CloudTrail Insights \u2014 Behavior Baseline", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-01", "target": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/IM-01", "target": "clause:google_saif:Google SAIF \u2014 Extend detection and response to AI (behaviora", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:identity/IM-01", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/IM-01", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-01", "target": "clause:nist_zt:Tenet 5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-01", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Machine Identity Baseline", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-02", "target": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/IM-02", "target": "clause:aws_iam:AWS GuardDuty \u2014 IAM Finding Types", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-02", "target": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/IM-02", "target": "clause:google_saif:Google Security Command Center \u2014 Threat Detection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-02", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/IM-02", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-02", "target": "clause:nist_zt:Tenet 5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-02", "target": "clause:okta_iam:Okta ThreatInsight \u2014 Anomalous Auth Detection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-03", "target": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part IV Phase 6 \u2014 Attribute-ba", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/IM-03", "target": "clause:aws_iam:AWS GuardDuty \u2014 Instance Credential Exfiltration", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-03", "target": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/IM-03", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/IM-03", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-03", "target": "clause:nist_zt:Tenet 5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-03", "target": "clause:okta_iam:Okta Adaptive MFA \u2014 Impossible Travel Detection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/IM-04", "target": "clause:anthropic_zt_agents:Part II \u2014 Memory-based privilege retention (escalating privi", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/IM-04", "target": "clause:aws_iam:AWS GuardDuty \u2014 Privilege Escalation Findings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-04", "target": "clause:cisa_zt:Identity Pillar \u2014 Risk Assessments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/IM-04", "target": "clause:google_saif:Google Security Command Center \u2014 privilege escalation detect", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-04", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/IM-04", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-04", "target": "clause:nist_zt:Tenet 6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-05", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (each agent instance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/IM-05", "target": "clause:aws_iam:AWS CloudTrail \u2014 Credential Sharing Detection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-05", "target": "clause:iso_24760:8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:identity/IM-05", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/IM-05", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-05", "target": "clause:nist_zt:Tenet 6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-05", "target": "clause:okta_iam:Okta \u2014 Concurrent Session Detection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-06", "target": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/IM-06", "target": "clause:aws_iam:AWS CloudTrail \u2014 Log File Integrity Validation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-06", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/IM-06", "target": "clause:google_saif:Google Cloud Audit Logs \u2014 Immutable Logs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-06", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:identity/IM-06", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-06", "target": "clause:nist_zt:Tenet 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-07", "target": "clause:aws_iam:AWS Trusted Advisor \u2014 Exposed Access Keys / Amazon GuardDuty", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-07", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/IM-07", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/IM-07", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:identity/IM-07", "target": "clause:nist_zt:Tenet 5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:identity/IM-07", "target": "clause:okta_iam:Okta ISPM \u2014 Credential Exposure Scanning", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-08", "target": "clause:anthropic_zt_agents:Part III \u2014 Automated response; Part V \u2014 Establish emergency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/IM-08", "target": "clause:aws_iam:AWS GuardDuty \u2014 Automated Incident Response", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-08", "target": "clause:cisa_zt:Visibility and Analytics (cross-cutting capability)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:identity/IM-08", "target": "clause:iso_24760:ISO/IEC 24760-2:2015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:identity/IM-08", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-08", "target": "clause:nist_zt:Tenet 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/IM-08", "target": "clause:okta_iam:Okta Workflows \u2014 Identity Incident Response", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/IM-09", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:identity/IM-09", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:identity/IM-09", "target": "clause:nist_rmf:GOVERN 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/NI-01", "target": "clause:aws_iam:AWS Organizations SCPs \u2014 Provisioning Restriction", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/NI-01", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:identity/NI-01", "target": "clause:nist_800_63:SP 800-63A-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/NI-01", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 Provisioning Gate", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/NI-01", "target": "clause:owasp_nhi10:NHI2:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_nhi10", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:identity/NI-01", "target": "clause:owasp_nhi10:NHI5:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_nhi10", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:identity/NI-01", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent IAM Core provisioning gate", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/NI-01", "target": "clause:scim:RFC7644 \u00a73.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "scim", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/NI-01", "target": "clause:spiffe_spire:SVID \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "spiffe_spire", "relation": "informs", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/NI-02", "target": "clause:anthropic_zt_agents:Part III \u2014 Service authentication; Part III \u2014 Access control", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/NI-02", "target": "clause:aws_iam:AWS IAM Best Practices \u2014 Least Privilege", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/NI-02", "target": "clause:google_saif:Google Cloud IAM Best Practices \u2014 Least Privilege Roles", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/NI-02", "target": "clause:nist_800_63:SP 800-63B-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/NI-02", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/NI-02", "target": "clause:nist_zt:Tenet 4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/NI-02", "target": "clause:okta_iam:Okta for AI Agents \u2014 Minimum Privilege", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/NI-02", "target": "clause:openid:RFC 9396 \u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openid", "relation": "equivalent_to", "source_version": "RFC 9396" }, "confidence": "direct" }, { "source": "control:identity/NI-03", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Short-lived, identity-provider-issued cred", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/NI-03", "target": "clause:aws_iam:AWS Secrets Manager \u2014 Automated Rotation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/NI-03", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/NI-03", "target": "clause:google_saif:Google Cloud Workload Identity Federation \u2014 Short Lived Toke", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/NI-03", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/NI-03", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/NI-03", "target": "clause:nist_zt:Tenet 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/NI-04", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Just-in-time (JIT) access; Part III \u2014 Priv", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/NI-04", "target": "clause:aws_iam:AWS STS \u2014 Assume Role Session Policies", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/NI-04", "target": "clause:google_saif:Google Cloud WIF \u2014 STS Token Exchange", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/NI-04", "target": "clause:nist_800_63:SP 800-63B-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/NI-04", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/NI-04", "target": "clause:nist_zt:Tenet 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:identity/NI-04", "target": "clause:okta_iam:Okta Cross App Access \u2014 Identity Assertion Authorization Gra", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/NI-04", "target": "clause:openid:RFC 9396 \u00a76", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openid", "relation": "equivalent_to", "source_version": "RFC 9396" }, "confidence": "direct" }, { "source": "control:identity/NI-05", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity and authentication (certificate li", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/NI-05", "target": "clause:aws_iam:AWS IAM \u2014 Role Deletion Revocation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/NI-05", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:identity/NI-05", "target": "clause:nist_800_63:SP 800-63B-4 \u00a74", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/NI-05", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 Deprovisioning", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/NI-05", "target": "clause:ping_identity:Ping Identity for AI \u2014 Agent Gateway revocation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ping_identity", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/NI-05", "target": "clause:scim:RFC7644 \u00a73.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "scim", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:identity/NI-06", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/NI-06", "target": "clause:aws_iam:AWS IAM Access Analyzer \u2014 Unused Access Findings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/NI-06", "target": "clause:cisa_zt:Identity Pillar \u2014 Identity Stores", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:identity/NI-06", "target": "clause:iso_24760:7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_24760", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:identity/NI-06", "target": "clause:okta_iam:Okta ISPM \u2014 Unmanaged Agent Discovery", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/NI-06", "target": "clause:scim:RFC 7644 \u00a73.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "scim", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:identity/NI-07", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation (credentials never in", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:identity/NI-07", "target": "clause:aws_iam:AWS Well-Architected SEC02-BP03 \u2014 Secrets Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/NI-07", "target": "clause:cisa_zt:Identity Pillar \u2014 Authentication", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:identity/NI-07", "target": "clause:google_saif:Google Cloud Secret Manager \u2014 Credential Hygiene", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/NI-07", "target": "clause:nist_800_63:SP 800-63B-4 \u00a73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:identity/NI-07", "target": "clause:nist_zt:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:identity/NI-07", "target": "clause:nist_zt:Tenet 6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_zt", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:identity/NI-08", "target": "clause:anthropic_zt_agents:Part V \u2014 Establish emergency change procedures in advance; P", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:identity/NI-08", "target": "clause:aws_iam:AWS IAM \u2014 Break Glass Role", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:identity/NI-08", "target": "clause:cisa_zt:Identity Pillar \u2014 Access Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cisa_zt", "relation": "informs", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:identity/NI-08", "target": "clause:nist_800_63:SP 800-63B-4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_63", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:identity/NI-08", "target": "clause:okta_iam:Okta Privileged Access \u2014 Break Glass", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:identity/NI-09", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:identity/NI-09", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:identity/NI-09", "target": "clause:nist_rmf:GOVERN 1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:knowledge/KC-01", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KC-01", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KC-01", "target": "clause:iso_30401:4.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KC-01", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KC-01", "target": "clause:itil_4:\u00a75.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:knowledge/KC-02", "target": "clause:aws_bedrock_kb:Knowledge Bases \u2014 data source sync and ingestion job status", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_kb", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KC-02", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KC-02", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KC-02", "target": "clause:google_vertex_rag:Vertex AI RAG \u2014 metadata filters at query time", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_vertex_rag", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KC-02", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KC-03", "target": "clause:dama_dmbok:Ch. 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KC-03", "target": "clause:databricks_unity:Unity Catalog \u2014 data lineage for ingestion jobs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KC-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KC-03", "target": "clause:iso_30401:4.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KC-03", "target": "clause:itil_4:\u00a75.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:knowledge/KC-04", "target": "clause:dama_dmbok:Ch. 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KC-04", "target": "clause:databricks_unity:Delta Lake \u2014 time travel and version history", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KC-04", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KC-04", "target": "clause:iso_42001:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KC-04", "target": "clause:w3c_prov:\u00a75.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:knowledge/KC-05", "target": "clause:anthropic_transparency:Model Card \u2014 Training Data Cutoff", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_transparency", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KC-05", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KC-05", "target": "clause:iso_42001:A.6.2.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KC-05", "target": "clause:openai_transparency:System Card \u2014 Knowledge Limitations", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_transparency", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KC-06", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KC-06", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KC-06", "target": "clause:iso_27002:5.12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:knowledge/KC-06", "target": "clause:iso_30401:6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KC-06", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:knowledge/KC-07", "target": "clause:eu_ai_act:72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KC-07", "target": "clause:iso_30401:10.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KC-07", "target": "clause:iso_42001:10.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KC-07", "target": "clause:itil_4:\u00a75.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:knowledge/KC-08", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KC-08", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KC-08", "target": "clause:iso_30401:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KC-08", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KC-08", "target": "clause:microsoft_azure_ai:Azure AI Compliance \u2014 Evidence Collection for Audits", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_ai", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:knowledge/KC-08", "target": "clause:w3c_prov:\u00a75.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:knowledge/KG-01", "target": "clause:dama_dmbok:Ch. 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:knowledge/KG-01", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KG-01", "target": "clause:iso_30401:5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KG-01", "target": "clause:iso_42001:5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KG-01", "target": "clause:iso_42001:5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KG-01", "target": "clause:itil_4:\u00a75.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:knowledge/KG-02", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KG-02", "target": "clause:dama_dmbok:Ch. 4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KG-02", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KG-02", "target": "clause:iso_27002:5.12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:knowledge/KG-02", "target": "clause:iso_30401:8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KG-02", "target": "clause:iso_42001:6.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KG-03", "target": "clause:dama_dmbok:Ch. 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:knowledge/KG-03", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KG-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KG-03", "target": "clause:iso_30401:5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KG-03", "target": "clause:iso_42001:5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KG-04", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KG-04", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KG-04", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KG-04", "target": "clause:w3c_prov:\u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:knowledge/KG-05", "target": "clause:aws_bedrock_kb:Knowledge Base Data Source Configuration", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_kb", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:knowledge/KG-05", "target": "clause:dama_dmbok:Ch. 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:knowledge/KG-05", "target": "clause:databricks_unity:Unity Catalog \u2014 External Locations and Credentials", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:knowledge/KG-05", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KG-05", "target": "clause:eu_ai_act:25", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KG-05", "target": "clause:iso_27002:5.19", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:knowledge/KG-05", "target": "clause:iso_42001:A.10.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KG-06", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:knowledge/KG-06", "target": "clause:eu_ai_act:73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KG-06", "target": "clause:iso_30401:10.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KG-06", "target": "clause:iso_42001:10.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KG-06", "target": "clause:itil_4:Incident Management Practice", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:knowledge/KG-07", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KG-07", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KG-07", "target": "clause:iso_30401:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KG-07", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KG-07", "target": "clause:itil_4:Continual Improvement Practice", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:knowledge/KG-08", "target": "clause:dama_dmbok:Ch. 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:knowledge/KG-08", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KG-08", "target": "clause:eu_ai_act:47", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KG-08", "target": "clause:iso_27002:5.36", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "adjacent" }, { "source": "control:knowledge/KG-08", "target": "clause:iso_30401:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:knowledge/KG-08", "target": "clause:iso_42001:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KG-08", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KG-08", "target": "clause:w3c_prov:\u00a75.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:knowledge/KI-01", "target": "clause:dama_dmbok:Ch. 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:knowledge/KI-01", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KI-01", "target": "clause:iso_30401:4.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KI-01", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KI-02", "target": "clause:aws_bedrock_kb:Guardrails \u2014 content filters and contextual grounding check", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_kb", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:knowledge/KI-02", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KI-02", "target": "clause:iso_27002:8.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "adjacent" }, { "source": "control:knowledge/KI-02", "target": "clause:iso_42001:6.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KI-02", "target": "clause:openlineage:Run events (OpenLineage OpenAPI spec)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openlineage", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:knowledge/KI-03", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KI-03", "target": "clause:iso_42001:A.7.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KI-03", "target": "clause:itil_4:\u00a75.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "adjacent" }, { "source": "control:knowledge/KI-03", "target": "clause:microsoft_azure_ai:Azure AI Search \u2014 Index Schema", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_ai", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:knowledge/KI-03", "target": "clause:w3c_prov:\u00a75", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": "2013" }, "confidence": "partial" }, { "source": "control:knowledge/KI-04", "target": "clause:dama_dmbok:Ch. 7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:knowledge/KI-04", "target": "clause:databricks_unity:Unity Catalog \u2014 Tags and Column-Level Security", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:knowledge/KI-04", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KI-04", "target": "clause:iso_27002:5.12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:knowledge/KI-04", "target": "clause:iso_42001:A.7.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KI-05", "target": "clause:anthropic_transparency:Model card \u2014 training data description", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_transparency", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:knowledge/KI-05", "target": "clause:dama_dmbok:Ch. 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:knowledge/KI-05", "target": "clause:eu_ai_act:53", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KI-05", "target": "clause:google_vertex_rag:Grounding \u2014 Data Source Configuration", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_vertex_rag", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:knowledge/KI-05", "target": "clause:iso_30401:4.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:knowledge/KI-06", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KI-06", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KI-06", "target": "clause:iso_30401:4.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KI-06", "target": "clause:iso_42001:A.7.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KI-06", "target": "clause:itil_4:\u00a75.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "adjacent" }, { "source": "control:knowledge/KI-07", "target": "clause:dama_dmbok:Ch. 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:knowledge/KI-07", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KI-07", "target": "clause:iso_27002:8.15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:knowledge/KI-07", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:knowledge/KI-07", "target": "clause:w3c_prov:\u00a75", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:knowledge/KI-08", "target": "clause:dama_dmbok:Ch. 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:knowledge/KI-08", "target": "clause:eu_ai_act:18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KI-08", "target": "clause:iso_27002:5.36", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "partial" }, { "source": "control:knowledge/KI-08", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KI-08", "target": "clause:itil_4:\u00a75.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "adjacent" }, { "source": "control:knowledge/KI-08", "target": "clause:w3c_prov:\u00a75.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": "2013" }, "confidence": "adjacent" }, { "source": "control:knowledge/KM-01", "target": "clause:dama_dmbok:Ch. 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KM-01", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KM-01", "target": "clause:iso_30401:8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KM-01", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KM-01", "target": "clause:itil_4:\u00a75.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:knowledge/KM-02", "target": "clause:aws_bedrock_kb:Knowledge Base Data Source Permissions", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_kb", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KM-02", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KM-02", "target": "clause:iso_27002:5.15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:knowledge/KM-02", "target": "clause:iso_30401:4.4.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KM-02", "target": "clause:microsoft_azure_ai:Azure AI Search Security Filters", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_ai", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KM-03", "target": "clause:dama_dmbok:Ch. 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KM-03", "target": "clause:databricks_unity:Delta Lake time travel", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KM-03", "target": "clause:iso_30401:4.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KM-03", "target": "clause:iso_42001:A.7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KM-03", "target": "clause:w3c_prov:\u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:knowledge/KM-04", "target": "clause:dama_dmbok:Ch. 6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KM-04", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KM-04", "target": "clause:iso_27002:8.10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:knowledge/KM-04", "target": "clause:iso_42001:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:knowledge/KM-05", "target": "clause:dama_dmbok:Ch. 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KM-05", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KM-05", "target": "clause:google_vertex_rag:Grounding and Citation APIs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_vertex_rag", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KM-05", "target": "clause:iso_42001:A.7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KM-05", "target": "clause:w3c_prov:\u00a75.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:knowledge/KM-06", "target": "clause:databricks_unity:Unity Catalog Data Lineage and Impact Analysis", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:knowledge/KM-06", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KM-06", "target": "clause:iso_30401:8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KM-06", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KM-06", "target": "clause:itil_4:\u00a75.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:knowledge/KM-07", "target": "clause:aws_bedrock_kb:Knowledge Base Metrics and Evaluation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_kb", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KM-07", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KM-07", "target": "clause:iso_30401:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KM-07", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KM-07", "target": "clause:itil_4:\u00a75.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:knowledge/KM-08", "target": "clause:dama_dmbok:Ch. 15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:knowledge/KM-08", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KM-08", "target": "clause:iso_30401:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KM-08", "target": "clause:iso_42001:9.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KM-08", "target": "clause:itil_4:\u00a75.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "adjacent" }, { "source": "control:knowledge/KR-01", "target": "clause:aws_bedrock_kb:Knowledge Bases \u2014 Retrieve API relevance scores", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_kb", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KR-01", "target": "clause:google_vertex_rag:Grounded generation \u2014 grounding support scores", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_vertex_rag", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KR-01", "target": "clause:iso_30401:8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KR-01", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KR-01", "target": "clause:itil_4:\u00a75.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "partial" }, { "source": "control:knowledge/KR-02", "target": "clause:anthropic_transparency:Model card \u2014 factual-accuracy evaluations and limitations", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_transparency", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:knowledge/KR-02", "target": "clause:aws_bedrock_kb:Guardrails \u2014 contextual grounding check", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_kb", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KR-02", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KR-02", "target": "clause:google_vertex_rag:Grounded generation \u2014 grounding supports and citations", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_vertex_rag", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KR-02", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KR-03", "target": "clause:anthropic_transparency:Model card \u2014 known limitations and citation-accuracy risks", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_transparency", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:knowledge/KR-03", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KR-03", "target": "clause:iso_30401:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:knowledge/KR-03", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KR-03", "target": "clause:w3c_prov:\u00a75.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:knowledge/KR-04", "target": "clause:anthropic_transparency:Model card \u2014 hallucination and factuality evaluations", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_transparency", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:knowledge/KR-04", "target": "clause:aws_bedrock_kb:Guardrails \u2014 contextual grounding check", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_kb", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KR-04", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KR-04", "target": "clause:google_vertex_rag:Check Grounding API", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_vertex_rag", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KR-04", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KR-05", "target": "clause:databricks_unity:Unity Catalog \u2014 fine-grained access control", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KR-05", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KR-05", "target": "clause:iso_27002:5.15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:knowledge/KR-05", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:knowledge/KR-06", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KR-06", "target": "clause:google_vertex_rag:Vertex AI RAG Engine \u2014 retrieval telemetry and evaluation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_vertex_rag", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:knowledge/KR-06", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KR-06", "target": "clause:itil_4:\u00a75.2.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": "4" }, "confidence": "direct" }, { "source": "control:knowledge/KR-06", "target": "clause:microsoft_azure_ai:Azure AI Search \u2014 monitoring and search traffic analytics", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_ai", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KR-07", "target": "clause:dama_dmbok:Ch. 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "direct" }, { "source": "control:knowledge/KR-07", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KR-07", "target": "clause:iso_27002:8.15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:knowledge/KR-07", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:knowledge/KR-07", "target": "clause:w3c_prov:\u00a75.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:knowledge/KR-08", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": "2" }, "confidence": "partial" }, { "source": "control:knowledge/KR-08", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:knowledge/KR-08", "target": "clause:iso_30401:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": "2018" }, "confidence": "direct" }, { "source": "control:knowledge/KR-08", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:knowledge/KR-08", "target": "clause:w3c_prov:\u00a75.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": "2013" }, "confidence": "direct" }, { "source": "control:knowledge/KR-09", "target": "clause:owasp_llm10:LLM08:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:knowledge/KS-01", "target": "clause:aws_bedrock_kb:Knowledge Base data source configuration", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_kb", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:knowledge/KS-01", "target": "clause:c2pa:Content Credentials (C2PA manifests)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "c2pa", "relation": "equivalent_to", "source_version": "2.1" }, "confidence": "direct" }, { "source": "control:knowledge/KS-01", "target": "clause:dama_dmbok:Ch. 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-01", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:knowledge/KS-01", "target": "clause:iso_30401:4.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-01", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-02", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:knowledge/KS-02", "target": "clause:google_vertex_rag:RAG grounding quality configuration", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_vertex_rag", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:knowledge/KS-02", "target": "clause:iso_30401:8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-02", "target": "clause:iso_42001:A.7.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-02", "target": "clause:itil_4:\u00a75.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:knowledge/KS-03", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-03", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:knowledge/KS-03", "target": "clause:iso_30401:7.5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:knowledge/KS-03", "target": "clause:iso_42001:A.7.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-04", "target": "clause:dama_dmbok:Ch. 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-04", "target": "clause:databricks_unity:Data lineage and catalog metadata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "databricks_unity", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:knowledge/KS-04", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-04", "target": "clause:iso_27002:5.12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:knowledge/KS-04", "target": "clause:w3c_prov:\u00a72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-05", "target": "clause:anthropic_transparency:Model card \u2014 known limitations disclosure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_transparency", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:knowledge/KS-05", "target": "clause:dama_dmbok:Ch. 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:knowledge/KS-05", "target": "clause:iso_30401:4.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-05", "target": "clause:iso_42001:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:knowledge/KS-05", "target": "clause:itil_4:\u00a75.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "itil_4", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:knowledge/KS-06", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-06", "target": "clause:iso_27002:5.10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27002", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-06", "target": "clause:iso_42001:4.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-06", "target": "clause:microsoft_azure_ai:Azure AI Search index scope configuration", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_ai", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:knowledge/KS-07", "target": "clause:anthropic_transparency:Model card \u2014 knowledge cutoff disclosure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_transparency", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:knowledge/KS-07", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-07", "target": "clause:google_vertex_rag:Grounding citations and source attribution", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_vertex_rag", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:knowledge/KS-07", "target": "clause:iso_42001:A.7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-07", "target": "clause:w3c_prov:\u00a75.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "w3c_prov", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-08", "target": "clause:aws_bedrock_kb:Knowledge Bases audit logging and compliance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_bedrock_kb", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:knowledge/KS-08", "target": "clause:dama_dmbok:Ch. 15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dama_dmbok", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:knowledge/KS-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-08", "target": "clause:iso_30401:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_30401", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:knowledge/KS-08", "target": "clause:iso_42001:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:model/BH-01", "target": "clause:aicm:MDS-10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/BH-01", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/BH-01", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/BH-01", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/BH-01", "target": "clause:nist_rmf:MEASURE-2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/BH-01", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/BH-01", "target": "clause:owasp_aisvs:C11.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/BH-01", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/BH-01", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/BH-02", "target": "clause:aicm:MDS-10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/BH-02", "target": "clause:eu_ai_act:72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/BH-02", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/BH-02", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/BH-02", "target": "clause:nist_rmf:MEASURE-2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/BH-02", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/BH-02", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/BH-02", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/BH-03", "target": "clause:aicm:LOG-14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/BH-03", "target": "clause:eu_ai_act:72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/BH-03", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/BH-03", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/BH-03", "target": "clause:nist_rmf:MEASURE-2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/BH-03", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/BH-03", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/BH-03", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/BH-04", "target": "clause:aicm:TVM-13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/BH-04", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/BH-04", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/BH-04", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/BH-04", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:model/BH-04", "target": "clause:nist_rmf:MEASURE-2.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/BH-04", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/BH-04", "target": "clause:owasp_aitg:AITG-APP-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/BH-05", "target": "clause:aicm:LOG-07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/BH-05", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:model/BH-05", "target": "clause:iso_42001:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/BH-05", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/BH-05", "target": "clause:nist_rmf:GOVERN-1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/BH-05", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/BH-05", "target": "clause:sr262:Sec. VI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/BH-06", "target": "clause:aicm:AIS-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/BH-06", "target": "clause:eu_ai_act:55", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/BH-06", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/BH-06", "target": "clause:mitre:AML.M0015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/BH-06", "target": "clause:nist_rmf:MEASURE-2.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/BH-06", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/BH-06", "target": "clause:owasp_aitg:AITG-APP-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/BH-07", "target": "clause:eu_ai_act:55", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:model/BH-07", "target": "clause:iso_42001:7.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/BH-07", "target": "clause:mitre:AML.M0004", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/BH-07", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/BH-07", "target": "clause:nist_rmf:MANAGE-2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/BH-07", "target": "clause:owasp_ai_exchange:limitresources", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/BH-07", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/BH-07", "target": "clause:owasp_ai_exchange:ratelimit", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/BH-08", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:model/BH-08", "target": "clause:iso_42001:A.6.2.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/BH-08", "target": "clause:nist_rmf:MANAGE-1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/BH-09", "target": "clause:aicm:DSP-20", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/BH-09", "target": "clause:eu_ai_act:50", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:model/BH-09", "target": "clause:iso_42001:A.8.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/BH-09", "target": "clause:nist_ai_600_1:INFO-INTEGRITY", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:model/BH-09", "target": "clause:nist_rmf:GOVERN-1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/BH-09", "target": "clause:owasp_ai_exchange:aitransparency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/BH-10", "target": "clause:aicm:DSP-21", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/BH-10", "target": "clause:eu_ai_act:72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:model/BH-10", "target": "clause:iso_42001:A.7.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/BH-10", "target": "clause:nist_ai_100_2:NISTAML.023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:model/BH-10", "target": "clause:nist_rmf:MANAGE-4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/BH-10", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/BH-10", "target": "clause:owasp_aitg:AITG-INF-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/CR-01", "target": "clause:aicm:MDS-10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/CR-01", "target": "clause:eu_ai_act:72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/CR-01", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/CR-01", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/CR-01", "target": "clause:nist_rmf:MEASURE-2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/CR-01", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/CR-01", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/CR-02", "target": "clause:aicm:LOG-10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/CR-02", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/CR-02", "target": "clause:iso_42001:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/CR-02", "target": "clause:nist_rmf:GOVERN-1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/CR-02", "target": "clause:sr262:Sec. VI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/CR-03", "target": "clause:aicm:A&A-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/CR-03", "target": "clause:eu_ai_act:72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/CR-03", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/CR-03", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/CR-03", "target": "clause:nist_rmf:MEASURE-2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/CR-03", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:model/CR-03", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/CR-03", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/CR-04", "target": "clause:aicm:SEF-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/CR-04", "target": "clause:eu_ai_act:73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/CR-04", "target": "clause:iso_42001:10.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/CR-04", "target": "clause:nist_rmf:MANAGE-4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/CR-04", "target": "clause:owasp_ai_exchange:secprogram", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "partial" }, { "source": "control:model/CR-04", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "adjacent" }, { "source": "control:model/CR-05", "target": "clause:aicm:SEF-07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/CR-05", "target": "clause:eu_ai_act:72", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/CR-05", "target": "clause:iso_42001:A.8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/CR-05", "target": "clause:nist_rmf:GOVERN-4.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/CR-05", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "partial" }, { "source": "control:model/CR-05", "target": "clause:sr262:Sec. VI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "adjacent" }, { "source": "control:model/CR-06", "target": "clause:aicm:TVM-08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/CR-06", "target": "clause:eu_ai_act:73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:model/CR-06", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/CR-06", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/CR-06", "target": "clause:nist_rmf:MEASURE-2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/CR-06", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "partial" }, { "source": "control:model/CR-06", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "adjacent" }, { "source": "control:model/CR-07", "target": "clause:aicm:DSP-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/CR-07", "target": "clause:eu_ai_act:16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:model/CR-07", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/CR-07", "target": "clause:nist_rmf:GOVERN-1.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/CR-08", "target": "clause:aicm:A&A-04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "supporting" }, { "source": "control:model/CR-08", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:model/CR-08", "target": "clause:iso_42001:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/CR-08", "target": "clause:nist_rmf:GOVERN-1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/CR-08", "target": "clause:sr262:Sec. VI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "adjacent" }, { "source": "control:model/EV-01", "target": "clause:aicm:GRC-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/EV-01", "target": "clause:aisvs:C3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-01", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/EV-01", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/EV-01", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/EV-01", "target": "clause:mitre:AML.T0043", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "adjacent" }, { "source": "control:model/EV-01", "target": "clause:nist_rmf:MANAGE-1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-01", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/EV-01", "target": "clause:owasp_aitg:AITG-MOD-06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-01", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/EV-02", "target": "clause:aicm:A&A-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/EV-02", "target": "clause:aisvs:C3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-02", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/EV-02", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/EV-02", "target": "clause:llm10:LLM09:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/EV-02", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/EV-02", "target": "clause:mitre:AML.T0043", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "adjacent" }, { "source": "control:model/EV-02", "target": "clause:nist_ai_600_1:CONFABULATION", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:model/EV-02", "target": "clause:nist_rmf:MEASURE-2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-02", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/EV-02", "target": "clause:owasp_aitg:AITG-APP-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-02", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/EV-03", "target": "clause:aicm:A&A-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "adjacent" }, { "source": "control:model/EV-03", "target": "clause:eu_ai_act:55", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/EV-03", "target": "clause:iso_42001:6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/EV-03", "target": "clause:mitre:AML.T0043", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "adjacent" }, { "source": "control:model/EV-03", "target": "clause:nist_ai_600_1:CBRN", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:model/EV-03", "target": "clause:nist_rmf:MEASURE-2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-03", "target": "clause:owasp_aitg:AITG-INF-04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-04", "target": "clause:aicm:TVM-07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/EV-04", "target": "clause:aisvs:C11.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-04", "target": "clause:eu_ai_act:55", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/EV-04", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/EV-04", "target": "clause:llm10:LLM01:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/EV-04", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/EV-04", "target": "clause:mitre:AML.T0051", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:model/EV-04", "target": "clause:nist_ai_100_2:NISTAML.022", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:model/EV-04", "target": "clause:nist_ai_600_1:INFO-SECURITY", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:model/EV-04", "target": "clause:nist_rmf:MEASURE-2.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-04", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/EV-04", "target": "clause:owasp_aitg:AITG-MOD-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/EV-04", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "adjacent" }, { "source": "control:model/EV-05", "target": "clause:aicm:GRC-11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/EV-05", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/EV-05", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/EV-05", "target": "clause:llm10:LLM09:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/EV-05", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/EV-05", "target": "clause:nist_ai_600_1:HUMAN-AI-CONFIG", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:model/EV-05", "target": "clause:nist_rmf:MEASURE-2.11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-05", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:model/EV-05", "target": "clause:owasp_aitg:AITG-APP-10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/EV-05", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/EV-06", "target": "clause:aicm:MDS-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/EV-06", "target": "clause:aisvs:C3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-06", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/EV-06", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/EV-06", "target": "clause:nist_rmf:MEASURE-2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-06", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/EV-07", "target": "clause:aicm:CCC-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/EV-07", "target": "clause:aisvs:C3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-07", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/EV-07", "target": "clause:iso_42001:10.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/EV-07", "target": "clause:llm10:LLM04:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/EV-07", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/EV-07", "target": "clause:mitre:AML.T0043", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "adjacent" }, { "source": "control:model/EV-07", "target": "clause:nist_rmf:MANAGE-2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-07", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/EV-07", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/EV-08", "target": "clause:aicm:MDS-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/EV-08", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/EV-08", "target": "clause:iso_42001:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/EV-08", "target": "clause:nist_rmf:GOVERN-2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-08", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/EV-09", "target": "clause:aicm:GRC-10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/EV-09", "target": "clause:eu_ai_act:6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/EV-09", "target": "clause:iso_42001:6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/EV-09", "target": "clause:nist_rmf:MAP-1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-09", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "partial" }, { "source": "control:model/EV-09", "target": "clause:sr262:Sec. VI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/EV-10", "target": "clause:aicm:A&A-04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/EV-10", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/EV-10", "target": "clause:iso_42001:7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/EV-10", "target": "clause:nist_rmf:MEASURE-2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/EV-10", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/EV-11", "target": "clause:etsi_gr_sai_005:5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "etsi_gr_sai_005", "relation": "equivalent_to", "source_version": "V1.1.1" }, "confidence": "supporting" }, { "source": "control:model/EV-11", "target": "clause:nist_ai_100_2:NISTAML.021", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "direct" }, { "source": "control:model/EV-11", "target": "clause:nist_ai_100_2:NISTAML.023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "direct" }, { "source": "control:model/EV-11", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/EV-11", "target": "clause:owasp_ml_top10:ML10:2023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ml_top10", "relation": "defends_against", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/EV-12", "target": "clause:etsi_gr_sai_005:6.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "etsi_gr_sai_005", "relation": "equivalent_to", "source_version": "V1.1.1" }, "confidence": "supporting" }, { "source": "control:model/EV-12", "target": "clause:nist_ai_100_2:NISTAML.032", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "direct" }, { "source": "control:model/EV-12", "target": "clause:owasp_ai_exchange:modelobfuscation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/EV-12", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/EV-12", "target": "clause:owasp_aisvs:C11.2.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:model/EV-12", "target": "clause:owasp_ml_top10:ML03:2023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ml_top10", "relation": "defends_against", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:model/EV-13", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/EV-13", "target": "clause:nist_ai_100_2:NISTAML.037", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "direct" }, { "source": "control:model/EV-13", "target": "clause:nist_ai_100_2:NISTAML.038", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "direct" }, { "source": "control:model/EV-13", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/EV-13", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/LI-01", "target": "clause:aisvs:C3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/LI-01", "target": "clause:iso_42001:A.6.2.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:model/LI-01", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/LI-01", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/LI-01", "target": "clause:mitre:AML.T0044", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:model/LI-01", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:model/LI-01", "target": "clause:nist_rmf:GOVERN-1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/LI-01", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/LI-01", "target": "clause:owasp_aitg:AITG-INF-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:model/LI-01", "target": "clause:sr262:Sec. VI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "direct" }, { "source": "control:model/LI-02", "target": "clause:aisvs:C6.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/LI-02", "target": "clause:iso_42001:A.6.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:model/LI-02", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/LI-02", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/LI-02", "target": "clause:mitre:AML.T0018", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:model/LI-02", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:model/LI-02", "target": "clause:nist_rmf:MAP-4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/LI-02", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/LI-02", "target": "clause:owasp_aitg:AITG-INF-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/LI-03", "target": "clause:iso_42001:A.10.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/LI-03", "target": "clause:llm10:LLM03:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:model/LI-03", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/LI-03", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/LI-03", "target": "clause:mitre:AML.T0010", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:model/LI-03", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:model/LI-03", "target": "clause:nist_rmf:GOVERN-6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/LI-03", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:model/LI-03", "target": "clause:owasp_aitg:AITG-INF-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/LI-03", "target": "clause:owasp_ml_top10:ML06:2023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ml_top10", "relation": "defends_against", "source_version": "2023" }, "confidence": "supporting" }, { "source": "control:model/LI-04", "target": "clause:eu_ai_act:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:model/LI-04", "target": "clause:iso_42001:A.6.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/LI-04", "target": "clause:mitre:AML.T0044", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "adjacent" }, { "source": "control:model/LI-04", "target": "clause:nist_rmf:GOVERN-4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/LI-04", "target": "clause:owasp_ai_exchange:aitransparency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "partial" }, { "source": "control:model/LI-04", "target": "clause:sr262:Sec. IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "direct" }, { "source": "control:model/LI-05", "target": "clause:iso_42001:A.6.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/LI-05", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/LI-05", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/LI-05", "target": "clause:mitre:AML.T0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "adjacent" }, { "source": "control:model/LI-05", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:model/LI-05", "target": "clause:nist_rmf:MAP-2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/LI-05", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/LI-06", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/LI-06", "target": "clause:iso_42001:6.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:model/LI-06", "target": "clause:mitre:AML.T0044", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:model/LI-06", "target": "clause:nist_rmf:MANAGE-2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/LI-06", "target": "clause:owasp_aitg:AITG-MOD-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:model/LI-07", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:model/LI-07", "target": "clause:iso_42001:A.9.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/LI-07", "target": "clause:llm10:LLM09:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/LI-07", "target": "clause:nist_rmf:MAP-2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/LI-07", "target": "clause:owasp_ai_exchange:aitransparency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "partial" }, { "source": "control:model/LI-08", "target": "clause:aicm:MDS-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/LI-08", "target": "clause:iso_42001:A.5.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:model/LI-08", "target": "clause:llm10:LLM03:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "adjacent" }, { "source": "control:model/LI-08", "target": "clause:nist_rmf:GOVERN-1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/LI-08", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "partial" }, { "source": "control:model/LI-08", "target": "clause:owasp_aisvs:C1.1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/LI-09", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/LI-09", "target": "clause:iso_42001:6.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:model/LI-09", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/LI-09", "target": "clause:nist_rmf:MANAGE-4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/LI-09", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "partial" }, { "source": "control:model/LI-10", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/LI-10", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/LI-10", "target": "clause:nist_rmf:GOVERN-1.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/OA-01", "target": "clause:aicm:GRC-06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/OA-01", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/OA-01", "target": "clause:iso_42001:5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/OA-01", "target": "clause:nist_rmf:GOVERN-2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/OA-01", "target": "clause:owasp_ai_exchange:aiprogram", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "partial" }, { "source": "control:model/OA-01", "target": "clause:sr262:Sec. VI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/OA-02", "target": "clause:aicm:GRC-15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/OA-02", "target": "clause:eu_ai_act:14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/OA-02", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/OA-02", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/OA-02", "target": "clause:mitre:AML.M0029", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/OA-02", "target": "clause:mitre:AML.M0030", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/OA-02", "target": "clause:nist_rmf:GOVERN-3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/OA-02", "target": "clause:owasp_ai_exchange:oversight", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:model/OA-02", "target": "clause:owasp_aitg:AITG-APP-13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:model/OA-02", "target": "clause:sr262:Sec. IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "adjacent" }, { "source": "control:model/OA-03", "target": "clause:aicm:GRC-10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/OA-03", "target": "clause:eu_ai_act:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/OA-03", "target": "clause:iso_42001:5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/OA-03", "target": "clause:nist_rmf:GOVERN-2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/OA-03", "target": "clause:owasp_ai_exchange:aiprogram", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/OA-03", "target": "clause:sr262:Sec. VI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/OA-04", "target": "clause:aicm:GRC-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "supporting" }, { "source": "control:model/OA-04", "target": "clause:iso_42001:6.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/OA-04", "target": "clause:mitre:AML.M0026", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/OA-04", "target": "clause:mitre:AML.M0027", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/OA-04", "target": "clause:mitre:AML.M0028", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/OA-04", "target": "clause:nist_rmf:GOVERN-1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/OA-04", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/OA-04", "target": "clause:owasp_aitg:AITG-APP-06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:model/OA-05", "target": "clause:aicm:GRC-07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/OA-05", "target": "clause:eu_ai_act:43", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/OA-05", "target": "clause:iso_42001:4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/OA-05", "target": "clause:nist_rmf:GOVERN-1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/OA-05", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/OA-05", "target": "clause:sr262:Sec. VI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/OA-06", "target": "clause:iso_42001:A.10.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/OA-06", "target": "clause:llm10:LLM03:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/OA-06", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/OA-06", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/OA-06", "target": "clause:mitre:AML.T0010", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:model/OA-06", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:model/OA-06", "target": "clause:nist_rmf:GOVERN-6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/OA-06", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:model/OA-06", "target": "clause:sr262:Sec. VII", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/OA-07", "target": "clause:aicm:SEF-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "supporting" }, { "source": "control:model/OA-07", "target": "clause:eu_ai_act:73", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/OA-07", "target": "clause:iso_42001:10.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/OA-07", "target": "clause:nist_rmf:MANAGE-2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/OA-07", "target": "clause:sr262:Sec. VI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/OA-08", "target": "clause:aicm:GRC-13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/OA-08", "target": "clause:eu_ai_act:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/OA-08", "target": "clause:iso_42001:A.8.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/OA-08", "target": "clause:llm10:LLM09:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/OA-08", "target": "clause:nist_rmf:MANAGE-4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/OA-08", "target": "clause:owasp_ai_exchange:aitransparency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/OA-08", "target": "clause:owasp_ai_exchange:explainability", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/OA-08", "target": "clause:owasp_aitg:AITG-APP-14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/TG-01", "target": "clause:aicm:DSP-23", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/TG-01", "target": "clause:aisvs:C1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/TG-01", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/TG-01", "target": "clause:iso_42001:A.7.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:model/TG-01", "target": "clause:llm10:LLM04:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/TG-01", "target": "clause:mitre:AML.M0007", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/TG-01", "target": "clause:mitre:AML.T0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:model/TG-01", "target": "clause:nist_rmf:MAP-2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/TG-01", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:model/TG-01", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/TG-01", "target": "clause:sr262:Sec. IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "direct" }, { "source": "control:model/TG-02", "target": "clause:aicm:GRC-11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/TG-02", "target": "clause:aisvs:C1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/TG-02", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:model/TG-02", "target": "clause:iso_42001:A.7.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/TG-02", "target": "clause:llm10:LLM04:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/TG-02", "target": "clause:mitre:AML.M0007", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/TG-02", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/TG-02", "target": "clause:mitre:AML.T0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:model/TG-02", "target": "clause:nist_rmf:MEASURE-2.11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/TG-02", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/TG-02", "target": "clause:owasp_ai_exchange:unwantedbiastesting", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "partial" }, { "source": "control:model/TG-02", "target": "clause:owasp_aitg:AITG-DAT-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/TG-02", "target": "clause:sr262:Sec. IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/TG-03", "target": "clause:aicm:DSP-12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/TG-03", "target": "clause:aisvs:C1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/TG-03", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/TG-03", "target": "clause:iso_42001:A.7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/TG-03", "target": "clause:llm10:LLM03:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/TG-03", "target": "clause:mitre:AML.T0018", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:model/TG-03", "target": "clause:nist_ai_600_1:DATA-PRIVACY", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_600_1", "relation": "equivalent_to", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:model/TG-03", "target": "clause:nist_rmf:GOVERN-1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/TG-03", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:model/TG-03", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/TG-03", "target": "clause:sr262:Sec. IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/TG-04", "target": "clause:aicm:STA-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/TG-04", "target": "clause:aisvs:C1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/TG-04", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/TG-04", "target": "clause:iso_42001:A.7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/TG-04", "target": "clause:llm10:LLM04:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/TG-04", "target": "clause:mitre:AML.M0007", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/TG-04", "target": "clause:mitre:AML.T0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:model/TG-04", "target": "clause:nist_ai_100_2:NISTAML.012", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "partial" }, { "source": "control:model/TG-04", "target": "clause:nist_ai_100_2:NISTAML.013", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:model/TG-04", "target": "clause:nist_rmf:MEASURE-2.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/TG-04", "target": "clause:owasp_ai_exchange:dataqualitycontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/TG-04", "target": "clause:owasp_ai_exchange:poisonrobustmodel", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/TG-04", "target": "clause:owasp_aitg:AITG-MOD-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/TG-04", "target": "clause:owasp_ml_top10:ML02:2023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ml_top10", "relation": "defends_against", "source_version": "2023" }, "confidence": "supporting" }, { "source": "control:model/TG-04", "target": "clause:sr262:Sec. IV", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/TG-05", "target": "clause:aisvs:C1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/TG-05", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "direct" }, { "source": "control:model/TG-05", "target": "clause:iso_42001:A.7.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/TG-05", "target": "clause:llm10:LLM04:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:model/TG-05", "target": "clause:mitre:AML.T0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:model/TG-05", "target": "clause:nist_rmf:MAP-2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/TG-05", "target": "clause:sr262:Sec. V", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "direct" }, { "source": "control:model/TG-06", "target": "clause:aicm:DSP-16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:model/TG-06", "target": "clause:aisvs:C1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/TG-06", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/TG-06", "target": "clause:iso_42001:A.7.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/TG-06", "target": "clause:llm10:LLM04:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/TG-06", "target": "clause:mitre:AML.T0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:model/TG-06", "target": "clause:nist_rmf:MEASURE-2.10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/TG-06", "target": "clause:owasp_ai_exchange:dataminimize", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:model/TG-06", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/TG-06", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/TG-07", "target": "clause:aicm:STA-08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/TG-07", "target": "clause:aisvs:C1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/TG-07", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/TG-07", "target": "clause:iso_42001:A.7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/TG-07", "target": "clause:llm10:LLM03:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/TG-07", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/TG-07", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:model/TG-07", "target": "clause:mitre:AML.T0018", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "partial" }, { "source": "control:model/TG-07", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:model/TG-07", "target": "clause:nist_rmf:GOVERN-6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:model/TG-07", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:model/TG-07", "target": "clause:owasp_aitg:AITG-INF-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/TG-07", "target": "clause:sr262:Sec. VII", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "sr262", "relation": "equivalent_to", "source_version": "SR 26-2" }, "confidence": "partial" }, { "source": "control:model/TG-08", "target": "clause:aicm:DSP-16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "direct" }, { "source": "control:model/TG-08", "target": "clause:aisvs:C1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/TG-08", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:model/TG-08", "target": "clause:iso_42001:A.7.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:model/TG-08", "target": "clause:llm10:LLM04:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:model/TG-08", "target": "clause:mitre:AML.T0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:model/TG-08", "target": "clause:nist_rmf:GOVERN-1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:model/TG-08", "target": "clause:owasp_ai_exchange:shortretain", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:model/TG-08", "target": "clause:owasp_aitg:AITG-DAT-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aitg", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:privacy/DC-01", "target": "clause:aws_privacy:AWS Lake Formation Data Catalog", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DC-01", "target": "clause:gdpr:30", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DC-01", "target": "clause:google_saif:Model and Data Inventory Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DC-01", "target": "clause:iso_27701:7.2.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/DC-01", "target": "clause:lgpd:37", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "lgpd", "relation": "satisfies", "source_version": "13709/2018" }, "confidence": "direct" }, { "source": "control:privacy/DC-01", "target": "clause:microsoft_rai:Microsoft Purview Data Map", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DC-01", "target": "clause:nist_pf:ID.IM-P1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:privacy/DC-01", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/DC-01", "target": "clause:pipl:55", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "pipl", "relation": "satisfies", "source_version": "2021" }, "confidence": "partial" }, { "source": "control:privacy/DC-01", "target": "clause:quebec_law25:3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "quebec_law25", "relation": "satisfies", "source_version": "2021" }, "confidence": "direct" }, { "source": "control:privacy/DC-02", "target": "clause:aws_privacy:Amazon Macie Sensitive Data Discovery", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DC-02", "target": "clause:ccpa:1798.121", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "partial" }, { "source": "control:privacy/DC-02", "target": "clause:edpb_opinion_28_2024:3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "edpb_opinion_28_2024", "relation": "satisfies", "source_version": "28/2024" }, "confidence": "direct" }, { "source": "control:privacy/DC-02", "target": "clause:gdpr:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DC-02", "target": "clause:google_saif:Google Cloud Sensitive Data Protection (Cloud DLP)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DC-02", "target": "clause:microsoft_rai:Microsoft Purview Information Protection Classification", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DC-02", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/DC-03", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 training data commitmen", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DC-03", "target": "clause:ccpa:1798.135", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "partial" }, { "source": "control:privacy/DC-03", "target": "clause:dpdp:6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dpdp", "relation": "satisfies", "source_version": "Act 2023; Rules 2025" }, "confidence": "partial" }, { "source": "control:privacy/DC-03", "target": "clause:gdpr:7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DC-03", "target": "clause:okta_iam:Okta Universal Directory \u2014 custom profile attributes for con", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DC-03", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 customer content and train", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DC-03", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/DC-04", "target": "clause:anthropic_privacy:Anthropic Privacy Policy and Consumer Terms \u2014 training data", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DC-04", "target": "clause:edpb_opinion_28_2024:3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "edpb_opinion_28_2024", "relation": "satisfies", "source_version": "28/2024" }, "confidence": "supporting" }, { "source": "control:privacy/DC-04", "target": "clause:gdpr:7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DC-04", "target": "clause:nist_pf:CT.PO-P1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:privacy/DC-04", "target": "clause:okta_iam:Okta API Access Management \u2014 OAuth scopes and consent", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DC-04", "target": "clause:openai_privacy:OpenAI Enterprise Privacy \u2014 customer responsibility for lawf", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DC-04", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/DC-05", "target": "clause:anthropic_privacy:Anthropic Zero Data Retention (ZDR) Addendum", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DC-05", "target": "clause:ccpa:1798.120", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "direct" }, { "source": "control:privacy/DC-05", "target": "clause:dpdp:6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dpdp", "relation": "satisfies", "source_version": "Act 2023; Rules 2025" }, "confidence": "partial" }, { "source": "control:privacy/DC-05", "target": "clause:gdpr:7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DC-05", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 automated deprovisioning workflo", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DC-05", "target": "clause:openai_privacy:OpenAI privacy request processing \u2014 data deletion", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DC-05", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/DC-06", "target": "clause:aws_privacy:AWS Lake Formation Fine-Grained Access Control", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DC-06", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DC-06", "target": "clause:gdpr:6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DC-06", "target": "clause:google_saif:Training Data Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DC-06", "target": "clause:iso_27701:7.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:privacy/DC-06", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DC-06", "target": "clause:nist_pf:ID.IM-P5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:privacy/DC-06", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/DC-07", "target": "clause:aws_privacy:AWS Shared Responsibility Model \u2014 customer obligations for c", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DC-07", "target": "clause:ccpa:1798.120", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "direct" }, { "source": "control:privacy/DC-07", "target": "clause:gdpr:8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DC-07", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/DC-07", "target": "clause:uk_duaa:children provisions", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "uk_duaa", "relation": "satisfies", "source_version": "2025 c.15" }, "confidence": "partial" }, { "source": "control:privacy/DC-08", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 processing on documente", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DC-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "partial" }, { "source": "control:privacy/DC-08", "target": "clause:iso_27701:7.3.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/DC-08", "target": "clause:nist_pf:CT.DM-P7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:privacy/DC-08", "target": "clause:okta_iam:Okta Workflows \u2014 event-driven lifecycle automation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DC-08", "target": "clause:openai_privacy:OpenAI API data controls \u2014 retention and training configurat", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DC-09", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DC-09", "target": "clause:iso_27701:7.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/DC-09", "target": "clause:nist_pf:CT.DM-P8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:privacy/DG-01", "target": "clause:aws_privacy:AWS Lake Formation and Glue Data Catalog \u2014 centralized gover", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DG-01", "target": "clause:eu_data_gov_act:20", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_data_gov_act", "relation": "satisfies", "source_version": "2022/868" }, "confidence": "supporting" }, { "source": "control:privacy/DG-01", "target": "clause:gdpr:30", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DG-01", "target": "clause:google_saif:Model and Data Inventory Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DG-01", "target": "clause:iso_27701:7.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/DG-01", "target": "clause:microsoft_rai:Microsoft Purview Data Map \u2014 lineage tracking", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DG-01", "target": "clause:nist_pf:ID.IM-P8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:privacy/DG-02", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum (DPA)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:privacy/DG-02", "target": "clause:aws_privacy:AWS Data Processing Addendum (GDPR DPA)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:privacy/DG-02", "target": "clause:ccpa:1798.140", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "partial" }, { "source": "control:privacy/DG-02", "target": "clause:gdpr:28", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DG-02", "target": "clause:iso_27701:8.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/DG-02", "target": "clause:microsoft_rai:Microsoft Product Terms and Data Processing Agreement", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:privacy/DG-02", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:privacy/DG-02", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:privacy/DG-02", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:privacy/DG-02", "target": "clause:openai_privacy:OpenAI Data Processing Addendum \u2014 GDPR Art 28 processor term", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:privacy/DG-02", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/DG-03", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 Standard Contractual Cl", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DG-03", "target": "clause:aws_privacy:AWS GDPR compliance whitepaper \u2014 data transfer mechanisms", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DG-03", "target": "clause:gdpr:46", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DG-03", "target": "clause:microsoft_rai:Microsoft EU Data Boundary Commitment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DG-03", "target": "clause:nist_pf:ID.DE-P3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:privacy/DG-03", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional storage options", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DG-03", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/DG-03", "target": "clause:uk_duaa:international transfer provisions", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "uk_duaa", "relation": "satisfies", "source_version": "2025 c.15" }, "confidence": "partial" }, { "source": "control:privacy/DG-04", "target": "clause:aws_privacy:AWS data transfer resources \u2014 customer TIA support", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DG-04", "target": "clause:gdpr:46", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DG-04", "target": "clause:microsoft_rai:Microsoft data transfer documentation \u2014 customer TIA support", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DG-04", "target": "clause:openai_privacy:OpenAI DPA and security documentation \u2014 customer transfer as", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DG-04", "target": "clause:uk_duaa:TIA equivalent", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "uk_duaa", "relation": "satisfies", "source_version": "2025 c.15" }, "confidence": "partial" }, { "source": "control:privacy/DG-05", "target": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment capabi", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DG-05", "target": "clause:aws_privacy:AWS GDPR compliance resources \u2014 customer DPIA support", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DG-05", "target": "clause:eu_ai_act:27", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:privacy/DG-05", "target": "clause:gdpr:35", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DG-05", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DG-05", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Impact Assessment req", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DG-06", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 security incident notif", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DG-06", "target": "clause:aws_privacy:AWS Security Incident Response Guide", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DG-06", "target": "clause:ccpa:1798.150", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "partial" }, { "source": "control:privacy/DG-06", "target": "clause:gdpr:33", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DG-06", "target": "clause:gdpr:34", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DG-06", "target": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DG-06", "target": "clause:iso_27701:6.13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/DG-06", "target": "clause:microsoft_rai:Microsoft Products and Services DPA \u2014 security incident noti", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DG-07", "target": "clause:anthropic_privacy:Anthropic API data retention controls", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DG-07", "target": "clause:aws_privacy:AWS data lifecycle management \u2014 S3 Lifecycle and RDS retenti", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DG-07", "target": "clause:ccpa:1798.100", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "partial" }, { "source": "control:privacy/DG-07", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DG-07", "target": "clause:iso_27701:7.4.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/DG-07", "target": "clause:microsoft_rai:Microsoft Purview Data Lifecycle Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DG-07", "target": "clause:openai_privacy:OpenAI API data retention policy \u2014 30-day default", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DG-07", "target": "clause:owasp_ai_exchange:shortretain", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:privacy/DG-08", "target": "clause:aws_privacy:AWS CloudTrail \u2014 immutable governance logging", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DG-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DG-08", "target": "clause:iso_27701:7.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/DG-08", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence archive", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DG-08", "target": "clause:nist_pf:CT.DM-P8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:privacy/DP-01", "target": "clause:aws_privacy:AWS KMS and S3 server-side encryption \u2014 AES-256 at rest, TLS", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:privacy/DP-01", "target": "clause:gdpr:32", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DP-01", "target": "clause:google_saif:Core element \u2014 Expand strong security foundations to the AI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DP-01", "target": "clause:iso_27701:6.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/DP-01", "target": "clause:microsoft_rai:Azure encryption \u2014 at rest and in transit", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-01", "target": "clause:nist_pf:PR.DS-P1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:privacy/DP-01", "target": "clause:nist_pf:PR.DS-P2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:privacy/DP-01", "target": "clause:openai_privacy:OpenAI security practices \u2014 AES-256 at rest, TLS 1.2+ in tra", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-02", "target": "clause:aws_privacy:AWS Glue DataBrew \u2014 PII masking and redaction transformation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-02", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:privacy/DP-02", "target": "clause:gdpr:25", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DP-02", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 pseudonymization an", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-02", "target": "clause:iso_27701:7.4.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/DP-02", "target": "clause:microsoft_rai:Microsoft Purview Information Protection \u2014 classification an", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DP-02", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:privacy/DP-03", "target": "clause:anthropic_privacy:Anthropic API data retention defaults", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DP-03", "target": "clause:aws_privacy:AWS Lake Formation \u00a7Column/Row-Level Security for Minimizati", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-03", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DP-03", "target": "clause:google_saif:User Data Management \u2014 mitigates Excessive Data Handling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-03", "target": "clause:iso_27701:7.4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/DP-03", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-03", "target": "clause:nist_pf:CT.DP-P1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:privacy/DP-03", "target": "clause:owasp_ai_exchange:dataminimize", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:privacy/DP-04", "target": "clause:edpb_opinion_28_2024:3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "edpb_opinion_28_2024", "relation": "satisfies", "source_version": "28/2024" }, "confidence": "direct" }, { "source": "control:privacy/DP-04", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DP-04", "target": "clause:google_saif:Inferred Sensitive Data risk \u2014 Training Data Management / Ou", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-04", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:privacy/DP-04", "target": "clause:nist_pf:CT.DP-P3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:privacy/DP-04", "target": "clause:openai_privacy:OpenAI usage policies \u2014 restricted inference uses", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DP-04", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/DP-05", "target": "clause:aws_privacy:Amazon Comprehend \u2014 PII detection and redaction", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-05", "target": "clause:edpb_opinion_28_2024:3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "edpb_opinion_28_2024", "relation": "satisfies", "source_version": "28/2024" }, "confidence": "direct" }, { "source": "control:privacy/DP-05", "target": "clause:gdpr:32", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DP-05", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 output inspection a", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-05", "target": "clause:microsoft_rai:Microsoft Purview Data Loss Prevention \u2014 generative AI app c", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-05", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:privacy/DP-05", "target": "clause:nist_pf:PR.DS-P5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:privacy/DP-05", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:privacy/DP-06", "target": "clause:aws_privacy:Amazon SageMaker Ground Truth \u2014 synthetic data generation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DP-06", "target": "clause:eu_ai_act:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:privacy/DP-06", "target": "clause:gdpr:4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DP-06", "target": "clause:google_saif:Privacy Enhancing Technologies", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DP-06", "target": "clause:nist_pf:CT.DP-P2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:privacy/DP-06", "target": "clause:owasp_ai_exchange:obfuscatetrainingdata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/DP-07", "target": "clause:anthropic_privacy:Anthropic API log retention controls", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-07", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DP-07", "target": "clause:google_saif:User Data Management \u2014 telemetry and log data", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-07", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction data governan", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-07", "target": "clause:nist_pf:CT.DM-P8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:privacy/DP-07", "target": "clause:openai_privacy:OpenAI API log retention \u2014 30-day abuse monitoring window", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-07", "target": "clause:owasp_ai_exchange:shortretain", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/DP-08", "target": "clause:aws_privacy:AWS CloudTrail with S3 Object Lock \u2014 WORM evidence archive", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-08", "target": "clause:gdpr:32", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DP-08", "target": "clause:iso_27701:6.9.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:privacy/DP-08", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 control evidence coll", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DP-08", "target": "clause:nist_pf:CT.DM-P8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:privacy/DS-01", "target": "clause:anthropic_privacy:Anthropic privacy support channels", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DS-01", "target": "clause:ccpa:1798.135", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "direct" }, { "source": "control:privacy/DS-01", "target": "clause:dpdp:ch. III", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dpdp", "relation": "satisfies", "source_version": "Act 2023; Rules 2025" }, "confidence": "partial" }, { "source": "control:privacy/DS-01", "target": "clause:gdpr:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DS-01", "target": "clause:okta_iam:Okta + DataGrail integration \u2014 automated DSR intake", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DS-01", "target": "clause:openai_privacy:OpenAI privacy request channels (privacy.openai.com / dsar@o", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DS-02", "target": "clause:aws_privacy:Amazon Cognito and AWS IAM \u2014 identity verification capabilit", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DS-02", "target": "clause:ccpa:1798.130", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "partial" }, { "source": "control:privacy/DS-02", "target": "clause:ccpa:1798.140", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "partial" }, { "source": "control:privacy/DS-02", "target": "clause:gdpr:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DS-02", "target": "clause:nist_pf:PR.AC-P6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:privacy/DS-02", "target": "clause:okta_iam:Okta Universal Directory and authentication policies \u2014 ident", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DS-03", "target": "clause:ccpa:1798.110", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "direct" }, { "source": "control:privacy/DS-03", "target": "clause:gdpr:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DS-03", "target": "clause:google_saif:Training Data Management \u2014 provenance and lineage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DS-03", "target": "clause:okta_iam:Okta scoped administrator roles \u2014 least-privilege data expor", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DS-03", "target": "clause:openai_privacy:OpenAI privacy request fulfillment \u2014 personal data access", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DS-03", "target": "clause:uk_duaa:access rights provisions", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "uk_duaa", "relation": "satisfies", "source_version": "2025 c.15" }, "confidence": "partial" }, { "source": "control:privacy/DS-04", "target": "clause:anthropic_privacy:Anthropic zero data retention option \u2014 non-retention by arch", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DS-04", "target": "clause:ccpa:1798.105", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "direct" }, { "source": "control:privacy/DS-04", "target": "clause:gdpr:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DS-04", "target": "clause:google_saif:Google Cloud Sensitive Data Protection \u2014 de-identification A", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DS-04", "target": "clause:iso_27701:8.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:privacy/DS-04", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 account deactivation and deletio", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DS-04", "target": "clause:openai_privacy:OpenAI data deletion controls", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DS-05", "target": "clause:ccpa:1798.185", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "direct" }, { "source": "control:privacy/DS-05", "target": "clause:eu_ai_act:86", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:privacy/DS-05", "target": "clause:gdpr:22", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DS-05", "target": "clause:google_saif:Agent Observability", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DS-05", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Transparency goals", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DS-05", "target": "clause:openai_privacy:OpenAI system cards \u2014 model behavior transparency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DS-05", "target": "clause:owasp_ai_exchange:explainability", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/DS-06", "target": "clause:ccpa:1798.130", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "partial" }, { "source": "control:privacy/DS-06", "target": "clause:gdpr:20", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DS-06", "target": "clause:nist_pf:CT.DM-P6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:privacy/DS-06", "target": "clause:okta_iam:Okta Universal Directory \u2014 profile export APIs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DS-06", "target": "clause:openai_privacy:OpenAI API \u2014 customer data export", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DS-07", "target": "clause:anthropic_privacy:Anthropic zero data retention option", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/DS-07", "target": "clause:ccpa:1798.120", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "direct" }, { "source": "control:privacy/DS-07", "target": "clause:gdpr:21", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DS-07", "target": "clause:okta_iam:Okta Lifecycle Management \u2014 account suspension states", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DS-07", "target": "clause:openai_privacy:OpenAI enterprise data controls \u2014 business data not used for", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/DS-07", "target": "clause:uk_duaa:automated decision rights", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "uk_duaa", "relation": "satisfies", "source_version": "2025 c.15" }, "confidence": "partial" }, { "source": "control:privacy/DS-08", "target": "clause:aws_privacy:AWS CloudTrail \u2014 API event logging", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DS-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/DS-08", "target": "clause:iso_27701:7.3.9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/DS-08", "target": "clause:nist_pf:CT.DM-P8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:privacy/DS-08", "target": "clause:okta_iam:Okta System Log \u2014 real-time audit events", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/DS-08", "target": "clause:openai_privacy:OpenAI privacy request records", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PC-01", "target": "clause:aws_privacy:AWS Customer Compliance Center \u2014 regulatory resources", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PC-01", "target": "clause:ccpa:1798.140", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "partial" }, { "source": "control:privacy/PC-01", "target": "clause:cnil_ai:How-to sheet 2 \u2014 Defining a purpose", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cnil_ai", "relation": "satisfies", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:privacy/PC-01", "target": "clause:dpdp:3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dpdp", "relation": "satisfies", "source_version": "Act 2023; Rules 2025" }, "confidence": "partial" }, { "source": "control:privacy/PC-01", "target": "clause:gdpr:3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/PC-01", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/PC-01", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 regulatory assessment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PC-01", "target": "clause:openai_privacy:OpenAI trust and compliance documentation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PC-01", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/PC-02", "target": "clause:anthropic_privacy:Anthropic compliance artifacts \u2014 SOC 2 Type II, GDPR DPA, HI", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PC-02", "target": "clause:aws_privacy:AWS ISO/IEC 42001 accredited certification \u2014 AI services", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PC-02", "target": "clause:gdpr:42", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "partial" }, { "source": "control:privacy/PC-02", "target": "clause:iso_27701:PIMS certification (standard as a whole)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/PC-02", "target": "clause:microsoft_rai:Azure AI compliance certifications \u2014 ISO 27001, SOC 2, ISO 4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PC-02", "target": "clause:nist_pf:GV.MT-P3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:privacy/PC-02", "target": "clause:openai_privacy:OpenAI compliance certifications \u2014 SOC 2, ISO 27001, ISO 420", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PC-03", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum and compliance documentat", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PC-03", "target": "clause:aws_privacy:AWS Artifact \u2014 jurisdiction-organized compliance reports and", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PC-03", "target": "clause:ccpa:1798.135", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "partial" }, { "source": "control:privacy/PC-03", "target": "clause:gdpr:30", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/PC-03", "target": "clause:microsoft_rai:Microsoft EU Data Boundary and Jurisdiction-Specific DPAs", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PC-03", "target": "clause:openai_privacy:OpenAI data residency \u2014 regional offerings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PC-03", "target": "clause:owasp_ai_exchange:checkcompliance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/PC-03", "target": "clause:uk_duaa:Data protection complaints procedure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "uk_duaa", "relation": "satisfies", "source_version": "2025 c.15" }, "confidence": "partial" }, { "source": "control:privacy/PC-04", "target": "clause:aws_privacy:AWS Audit Manager \u2014 framework-based assessments", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PC-04", "target": "clause:gdpr:24", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "partial" }, { "source": "control:privacy/PC-04", "target": "clause:google_saif:Core element \u2014 Adapt controls to adjust mitigations and crea", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/PC-04", "target": "clause:iso_27701:5.7.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/PC-04", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 compliance score and", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PC-04", "target": "clause:nist_pf:GV.MT-P3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:privacy/PC-05", "target": "clause:aws_privacy:AWS Well-Architected Machine Learning Lens \u2014 security and pr", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PC-05", "target": "clause:gdpr:25", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/PC-05", "target": "clause:google_saif:Secure-by-Default ML Tooling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/PC-05", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 Privacy & Security go", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PC-05", "target": "clause:nist_pf:GV.PO-P2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:privacy/PC-06", "target": "clause:anthropic_privacy:Anthropic Responsible Scaling Policy \u2014 pre-deployment risk a", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/PC-06", "target": "clause:aws_privacy:AWS ISO/IEC 42001 certification \u2014 AI management system impac", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PC-06", "target": "clause:eu_ai_act:27", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:privacy/PC-06", "target": "clause:gdpr:35", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "partial" }, { "source": "control:privacy/PC-06", "target": "clause:google_saif:Core element \u2014 Contextualize AI system risks in surrounding", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/PC-06", "target": "clause:microsoft_rai:Microsoft Responsible AI Impact Assessment template and guid", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PC-07", "target": "clause:aws_privacy:AWS Artifact \u2014 on-demand compliance reports", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PC-07", "target": "clause:gdpr:38", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/PC-07", "target": "clause:iso_27701:5.7.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/PC-07", "target": "clause:microsoft_rai:Microsoft Privacy Report \u2014 periodic privacy governance discl", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PC-08", "target": "clause:anthropic_privacy:Anthropic SOC 2 Type II and GDPR DPA \u2014 vendor assurance arti", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PC-08", "target": "clause:aws_privacy:AWS ISO/IEC 42001 certification and SOC 2 \u2014 vendor assurance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PC-08", "target": "clause:eu_ai_act:47", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:privacy/PC-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/PC-08", "target": "clause:iso_27701:5.8.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/PC-08", "target": "clause:microsoft_rai:Azure AI certifications \u2014 ISO 27001, SOC 2, ISO 42001", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PC-08", "target": "clause:openai_privacy:OpenAI certifications \u2014 SOC 2, ISO 27001, ISO 42001", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PM-01", "target": "clause:aws_privacy:Amazon Macie \u2014 sensitive data discovery and anomaly findings", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PM-01", "target": "clause:ccpa:1798.150", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "partial" }, { "source": "control:privacy/PM-01", "target": "clause:gdpr:33", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/PM-01", "target": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PM-01", "target": "clause:microsoft_rai:Microsoft Purview Insider Risk Management \u2014 risky data-handl", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PM-01", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:privacy/PM-01", "target": "clause:nist_pf:PR.DS-P5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:privacy/PM-01", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/PM-02", "target": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 data and model quality drif", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/PM-02", "target": "clause:edpb_opinion_28_2024:3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "edpb_opinion_28_2024", "relation": "satisfies", "source_version": "28/2024" }, "confidence": "direct" }, { "source": "control:privacy/PM-02", "target": "clause:gdpr:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "partial" }, { "source": "control:privacy/PM-02", "target": "clause:google_saif:Inferred Sensitive Data risk \u2014 Output Validation and Sanitiz", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PM-02", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/PM-02", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:privacy/PM-02", "target": "clause:nist_pf:CT.DP-P1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:privacy/PM-02", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/PM-03", "target": "clause:aws_privacy:AWS Config custom rules \u2014 configuration compliance checks", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PM-03", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/PM-03", "target": "clause:google_saif:Unauthorized Training Data risk \u2014 Training Data Management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/PM-03", "target": "clause:iso_27701:7.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/PM-03", "target": "clause:microsoft_rai:Microsoft Responsible AI Standard v2 \u2014 accountability and on", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/PM-03", "target": "clause:nist_pf:GV.MT-P1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:privacy/PM-03", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/PM-04", "target": "clause:anthropic_privacy:Anthropic API data controls \u2014 configuration verification", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PM-04", "target": "clause:gdpr:7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/PM-04", "target": "clause:iso_27701:7.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/PM-04", "target": "clause:nist_pf:CT.PO-P1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:privacy/PM-04", "target": "clause:okta_iam:Okta real-time directory synchronization \u2014 consent state pro", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "okta_iam", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PM-04", "target": "clause:openai_privacy:OpenAI API usage monitoring \u2014 data control configuration aud", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/PM-04", "target": "clause:owasp_ai_exchange:alloweddata", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/PM-05", "target": "clause:aws_privacy:Amazon SageMaker Model Monitor \u2014 inference quality monitorin", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/PM-05", "target": "clause:gdpr:32", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/PM-05", "target": "clause:google_saif:Sensitive Data Disclosure risk \u2014 Output Validation and Sanit", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PM-05", "target": "clause:microsoft_rai:Microsoft Purview DSPM for AI \u2014 AI interaction monitoring", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PM-05", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:privacy/PM-05", "target": "clause:nist_pf:CT.DM-P8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:privacy/PM-05", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/PM-06", "target": "clause:aws_privacy:AWS Security Hub \u2014 findings aggregation and automated respon", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PM-06", "target": "clause:ccpa:1798.150", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ccpa", "relation": "satisfies", "source_version": "CPRA eff. 2023-01-01; ADMT Regs adopted 2025-07-24" }, "confidence": "direct" }, { "source": "control:privacy/PM-06", "target": "clause:gdpr:33", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/PM-06", "target": "clause:gdpr:34", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/PM-06", "target": "clause:google_saif:Core element \u2014 Extend detection and response to bring AI int", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/PM-06", "target": "clause:microsoft_rai:Microsoft Products and Services DPA \u2014 security incident noti", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "supporting" }, { "source": "control:privacy/PM-07", "target": "clause:anthropic_privacy:Anthropic Data Processing Addendum \u2014 subprocessor disclosure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PM-07", "target": "clause:aws_privacy:AWS Marketplace Vendor Insights \u2014 third-party security and c", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PM-07", "target": "clause:gdpr:28", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/PM-07", "target": "clause:google_saif:Insecure Integrated Component risk", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_saif", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:privacy/PM-07", "target": "clause:iso_27701:8.5.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/PM-07", "target": "clause:iso_27701:8.5.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/PM-07", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:privacy/PM-07", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:privacy/PM-07", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:privacy/PM-07", "target": "clause:nist_pf:ID.DE-P5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:privacy/PM-07", "target": "clause:openai_privacy:OpenAI sub-processor list \u2014 DPA notification rights", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PM-07", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:privacy/PM-08", "target": "clause:aws_privacy:AWS CloudTrail with S3 Object Lock \u2014 WORM evidence archive", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_privacy", "relation": "informs", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PM-08", "target": "clause:gdpr:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "gdpr", "relation": "satisfies", "source_version": "2016/679" }, "confidence": "direct" }, { "source": "control:privacy/PM-08", "target": "clause:iso_27701:7.2.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27701", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:privacy/PM-08", "target": "clause:microsoft_rai:Microsoft Purview Compliance Manager \u2014 evidence collection a", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_rai", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:privacy/PM-08", "target": "clause:nist_pf:CT.DM-P8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_pf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "supporting" }, { "source": "control:resilience/FO-01", "target": "clause:aws_reliability:REL 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/FO-01", "target": "clause:dora:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/FO-01", "target": "clause:google_sre:Ch. 22", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/FO-01", "target": "clause:nist_800_160_v2:\u00a72.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/FO-01", "target": "clause:nist_csf:RC.RP-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/FO-02", "target": "clause:aws_reliability:REL 5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/FO-02", "target": "clause:dora:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/FO-02", "target": "clause:google_sre:Ch. 22", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/FO-02", "target": "clause:microsoft_azure_resil:Circuit Breaker Pattern \u2014 Azure Architecture Center", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:resilience/FO-02", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "partial" }, { "source": "control:resilience/FO-03", "target": "clause:cobit_dss04:DSS04.05 \u2014 Review, Maintain, and Improve Continuity Plans", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/FO-03", "target": "clause:dora:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": null }, "confidence": "direct" }, { "source": "control:resilience/FO-03", "target": "clause:google_sre:Ch. 22", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/FO-03", "target": "clause:iso_22301:8.4.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/FO-03", "target": "clause:nist_sp800_34:\u00a73.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/FO-04", "target": "clause:cis_controls_v8:Control 16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cis_controls_v8", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/FO-04", "target": "clause:dora:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/FO-04", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/FO-05", "target": "clause:aws_reliability:REL 5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/FO-05", "target": "clause:dora:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/FO-05", "target": "clause:google_sre:Ch. 22", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/FO-05", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/FO-06", "target": "clause:aws_reliability:REL 5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/FO-06", "target": "clause:cloudflare_resilience:Rate limiting and DDoS protection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cloudflare_resilience", "relation": "informs", "source_version": null }, "confidence": "direct" }, { "source": "control:resilience/FO-06", "target": "clause:dora:7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/FO-06", "target": "clause:google_sre:Ch. 22", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/FO-06", "target": "clause:nist_csf:PR.IR-04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": null }, "confidence": "adjacent" }, { "source": "control:resilience/FO-07", "target": "clause:aws_reliability:REL 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/FO-07", "target": "clause:dora:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/FO-07", "target": "clause:google_sre:Ch. 33", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/FO-07", "target": "clause:iso_22301:8.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/FO-07", "target": "clause:nist_800_160_v2:\u00a73.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/FO-08", "target": "clause:aws_reliability:REL 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/FO-08", "target": "clause:cobit_dss04:DSS04.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/FO-08", "target": "clause:dora:25", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": null }, "confidence": "direct" }, { "source": "control:resilience/FO-08", "target": "clause:google_sre:Production readiness review: fault tolerance criteria", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/FO-08", "target": "clause:iso_22301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": null }, "confidence": "direct" }, { "source": "control:resilience/FO-08", "target": "clause:microsoft_azure_resil:BCDR documentation: fault tolerance evidence", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/FO-08", "target": "clause:nist_csf:GV.OC-04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/FO-08", "target": "clause:nist_sp800_34:\u00a73.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": null }, "confidence": "partial" }, { "source": "control:resilience/RE-01", "target": "clause:aws_reliability:REL 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RE-01", "target": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Load balancing and failover, DDoS pr", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cloudflare_resilience", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RE-01", "target": "clause:dora:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "partial" }, { "source": "control:resilience/RE-01", "target": "clause:google_sre:Ch. 2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2018" }, "confidence": "partial" }, { "source": "control:resilience/RE-01", "target": "clause:google_sre:Ch. 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RE-01", "target": "clause:microsoft_azure_resil:Azure Resiliency \u2014 Availability zone design and geo-redundan", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RE-01", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RE-01", "target": "clause:nist_csf:RC.RP-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:resilience/RE-02", "target": "clause:aws_reliability:REL 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RE-02", "target": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Edge resilience patterns: stateless", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cloudflare_resilience", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RE-02", "target": "clause:google_sre:Ch. 26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RE-02", "target": "clause:iso_22301:8.4.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "adjacent" }, { "source": "control:resilience/RE-02", "target": "clause:microsoft_azure_resil:Durable Functions checkpoint", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RE-02", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RE-03", "target": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Failure management", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RE-03", "target": "clause:cis_controls_v8:Control 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cis_controls_v8", "relation": "equivalent_to", "source_version": "v8" }, "confidence": "direct" }, { "source": "control:resilience/RE-03", "target": "clause:dora:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "partial" }, { "source": "control:resilience/RE-03", "target": "clause:google_sre:Google SRE \u2014 Postmortem practices and error budget policies:", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RE-03", "target": "clause:iso_22301:8.4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RE-03", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Geo-redundant storage design, Azur", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RE-03", "target": "clause:nist_csf:RC.RP-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:resilience/RE-03", "target": "clause:nist_sp800_34:\u00a73.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev.1" }, "confidence": "direct" }, { "source": "control:resilience/RE-04", "target": "clause:aws_reliability:REL 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RE-04", "target": "clause:cobit_dss04:DSS04.03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RE-04", "target": "clause:dora:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "partial" }, { "source": "control:resilience/RE-04", "target": "clause:google_sre:Google SRE \u2014 Production readiness review and change manageme", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RE-04", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 infrastructure-as-code recovery (A", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RE-04", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RE-04", "target": "clause:nist_sp800_34:\u00a73.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev.1" }, "confidence": "direct" }, { "source": "control:resilience/RE-05", "target": "clause:aws_reliability:REL 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RE-05", "target": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 Rate limiting for API protection and", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cloudflare_resilience", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RE-05", "target": "clause:dora:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "adjacent" }, { "source": "control:resilience/RE-05", "target": "clause:google_sre:Ch. 21", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RE-05", "target": "clause:microsoft_azure_resil:Bulkhead pattern", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RE-05", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RE-06", "target": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Resilience design", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RE-06", "target": "clause:cloudflare_resilience:Cloudflare Resilience \u2014 DDoS protection and load balancing f", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cloudflare_resilience", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RE-06", "target": "clause:cobit_dss04:DSS04.02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RE-06", "target": "clause:dora:6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RE-06", "target": "clause:google_sre:Google SRE \u2014 Incident management, postmortem practices, and", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RE-06", "target": "clause:iso_22301:8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RE-06", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 design guidance for regulated work", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RE-06", "target": "clause:nist_sp800_34:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev.1" }, "confidence": "adjacent" }, { "source": "control:resilience/RE-07", "target": "clause:aws_reliability:AWS Well-Architected Framework \u2014 Well-Architected Review: st", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RE-07", "target": "clause:cobit_dss04:DSS04.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RE-07", "target": "clause:dora:6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "partial" }, { "source": "control:resilience/RE-07", "target": "clause:google_sre:Ch. 32", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RE-07", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 Design lifecycle integration: BCDR", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RE-07", "target": "clause:nist_800_160_v2:\u00a72.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RE-07", "target": "clause:nist_csf:GV.OC-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:resilience/RE-08", "target": "clause:aws_reliability:AWS Well-Architected Reliability Pillar \u2014 Testing reliabilit", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RE-08", "target": "clause:cobit_dss04:DSS04.08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RE-08", "target": "clause:dora:19", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RE-08", "target": "clause:google_sre:Google SRE \u2014 Postmortem practices and production readiness r", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RE-08", "target": "clause:iso_22301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RE-08", "target": "clause:iso_27031:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27031", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "adjacent" }, { "source": "control:resilience/RE-08", "target": "clause:microsoft_azure_resil:Azure Resiliency & BCDR \u2014 BCDR documentation, failover test", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RE-08", "target": "clause:nist_csf:ID.IM-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:resilience/RE-08", "target": "clause:nist_sp800_34:\u00a73.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev.1" }, "confidence": "direct" }, { "source": "control:resilience/RG-01", "target": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer and internal accoun", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-01", "target": "clause:cobit_dss04:DSS04.01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RG-01", "target": "clause:dora:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RG-01", "target": "clause:google_sre:Production readiness review", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-01", "target": "clause:iso_22301:5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RG-01", "target": "clause:microsoft_azure_resil:Business continuity planning", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RG-01", "target": "clause:nist_csf:GV.RR", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RG-01", "target": "clause:nist_sp800_34:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev. 1" }, "confidence": "direct" }, { "source": "control:resilience/RG-01", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Safety Advisory Group", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-02", "target": "clause:aws_reliability:Resilience design principles", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RG-02", "target": "clause:cobit_dss04:DSS04.02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RG-02", "target": "clause:dora:6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RG-02", "target": "clause:google_sre:Error budget policies", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RG-02", "target": "clause:iso_22301:6.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RG-02", "target": "clause:microsoft_azure_resil:BCDR design guidance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RG-02", "target": "clause:nist_csf:GV.PO", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RG-02", "target": "clause:nist_sp800_34:\u00a73.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev. 1" }, "confidence": "direct" }, { "source": "control:resilience/RG-03", "target": "clause:anthropic_rsp:Governance \u2014 Responsible Scaling Officer accountability", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-03", "target": "clause:cobit_dss04:DSS04.01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RG-03", "target": "clause:dora:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RG-03", "target": "clause:iso_22301:5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RG-03", "target": "clause:microsoft_azure_resil:Business continuity planning", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-03", "target": "clause:nist_csf:GV.RR-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RG-03", "target": "clause:nist_sp800_34:\u00a72.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev. 1" }, "confidence": "partial" }, { "source": "control:resilience/RG-03", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 leadership risk ownership", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-04", "target": "clause:anthropic_rsp:Capability thresholds \u2014 ASL-3 standards at defined capabilit", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-04", "target": "clause:aws_reliability:Failure management \u2014 RTO/RPO alignment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RG-04", "target": "clause:cobit_dss04:DSS04.02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RG-04", "target": "clause:dora:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RG-04", "target": "clause:google_sre:Ch. 3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RG-04", "target": "clause:iso_22301:8.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RG-04", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 BCDR design guidance", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RG-04", "target": "clause:nist_sp800_34:\u00a73.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev. 1" }, "confidence": "direct" }, { "source": "control:resilience/RG-04", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical levels", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-05", "target": "clause:aws_reliability:Foundations \u2014 organizational prerequisites for reliability", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RG-05", "target": "clause:cobit_dss04:DSS04.01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RG-05", "target": "clause:dora:5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RG-05", "target": "clause:google_sre:Toil reduction and on-call practices", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RG-05", "target": "clause:iso_22301:7.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RG-05", "target": "clause:nist_csf:GV.SC-07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-05", "target": "clause:nist_sp800_34:\u00a72.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev. 1" }, "confidence": "partial" }, { "source": "control:resilience/RG-06", "target": "clause:aws_reliability:Failure management \u2014 recovery procedures", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RG-06", "target": "clause:cobit_dss04:DSS04.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RG-06", "target": "clause:dora:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RG-06", "target": "clause:google_sre:Incident management and postmortem practices", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RG-06", "target": "clause:iso_22301:8.4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RG-06", "target": "clause:microsoft_azure_resil:Failover configuration and recovery objectives", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RG-06", "target": "clause:nist_csf:RC.RP", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RG-06", "target": "clause:nist_sp800_34:\u00a74.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev. 1" }, "confidence": "direct" }, { "source": "control:resilience/RG-07", "target": "clause:aws_reliability:REL 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RG-07", "target": "clause:cobit_dss04:DSS04.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RG-07", "target": "clause:dora:6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RG-07", "target": "clause:google_sre:SLO/SLA management and error budget policies", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RG-07", "target": "clause:iso_22301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RG-07", "target": "clause:nist_csf:GV.OV-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RG-07", "target": "clause:nist_sp800_34:\u00a73.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev. 1" }, "confidence": "partial" }, { "source": "control:resilience/RG-07", "target": "clause:openai_preparedness:\u00a75.1 Internal governance \u2014 Capabilities and Safeguards Repor", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-08", "target": "clause:anthropic_rsp:Risk Reports and capability determinations \u2014 documented safe", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-08", "target": "clause:aws_reliability:REL 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-08", "target": "clause:dora:6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RG-08", "target": "clause:google_sre:Production readiness review", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-08", "target": "clause:iso_22301:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RG-08", "target": "clause:iso_27031:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27031", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:resilience/RG-08", "target": "clause:nist_800_160_v2:\u00a73.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RG-08", "target": "clause:nist_csf:GV.OV-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RG-08", "target": "clause:nist_sp800_34:\u00a73.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev. 1" }, "confidence": "adjacent" }, { "source": "control:resilience/RG-08", "target": "clause:openai_preparedness:Capabilities and Safeguards Reports (\u00a75.1 Internal governanc", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:resilience/RO-01", "target": "clause:aws_reliability:REL 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RO-01", "target": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based steering policies", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cloudflare_resilience", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RO-01", "target": "clause:dora:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RO-01", "target": "clause:google_sre:Production Readiness Review \u2014 Failover procedures and incide", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RO-01", "target": "clause:iso_22301:8.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RO-01", "target": "clause:microsoft_azure_resil:BCDR \u2014 Failover configuration and availability zone design", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RO-01", "target": "clause:nist_csf:RC.RP-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RO-01", "target": "clause:nist_sp800_34:\u00a73.4.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RO-02", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 provider-initiated de-deployment", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:resilience/RO-02", "target": "clause:aws_reliability:REL 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RO-02", "target": "clause:dora:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "partial" }, { "source": "control:resilience/RO-02", "target": "clause:google_sre:Ch. 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RO-02", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Deployment rollback and blue-green re", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RO-02", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RO-02", "target": "clause:nist_csf:RC.RP-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RO-02", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment changes", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:resilience/RO-03", "target": "clause:aws_reliability:REL 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RO-03", "target": "clause:cis_controls_v8:Control 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cis_controls_v8", "relation": "equivalent_to", "source_version": "v8" }, "confidence": "direct" }, { "source": "control:resilience/RO-03", "target": "clause:dora:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RO-03", "target": "clause:google_sre:Incident management \u2014 Verification of data consistency befor", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RO-03", "target": "clause:iso_22301:8.4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RO-03", "target": "clause:microsoft_azure_resil:BCDR \u2014 Data backup, geo-redundant recovery, and RPO verifica", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RO-03", "target": "clause:nist_csf:RC.RP-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RO-03", "target": "clause:nist_sp800_34:\u00a73.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RO-04", "target": "clause:cobit_dss04:DSS04.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RO-04", "target": "clause:dora:19", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RO-04", "target": "clause:google_sre:Incident management \u2014 Incident Commander role and structured", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RO-04", "target": "clause:iso_22301:8.4.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RO-04", "target": "clause:iso_27031:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27031", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:resilience/RO-04", "target": "clause:microsoft_azure_resil:Business continuity planning \u2014 Communication procedures and", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RO-04", "target": "clause:nist_sp800_34:\u00a74.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RO-05", "target": "clause:aws_reliability:REL 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RO-05", "target": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health checks and origin valid", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cloudflare_resilience", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RO-05", "target": "clause:dora:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "partial" }, { "source": "control:resilience/RO-05", "target": "clause:google_sre:Ch. 14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RO-05", "target": "clause:iso_22301:8.4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RO-05", "target": "clause:microsoft_azure_resil:Failover configuration \u2014 Return-to-service validation and pr", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RO-05", "target": "clause:nist_csf:RC.RP-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RO-06", "target": "clause:aws_reliability:REL 6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RO-06", "target": "clause:cis_controls_v8:Control 8.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cis_controls_v8", "relation": "equivalent_to", "source_version": "v8" }, "confidence": "partial" }, { "source": "control:resilience/RO-06", "target": "clause:cobit_dss04:DSS04.08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RO-06", "target": "clause:dora:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2024/1774" }, "confidence": "direct" }, { "source": "control:resilience/RO-06", "target": "clause:google_sre:Postmortem practices \u2014 Timestamped action log and incident t", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RO-06", "target": "clause:iso_22301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RO-06", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery documentation and activity l", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RO-06", "target": "clause:nist_sp800_34:\u00a73.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RO-07", "target": "clause:aws_reliability:REL 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RO-07", "target": "clause:cobit_dss04:DSS04.08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RO-07", "target": "clause:dora:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "partial" }, { "source": "control:resilience/RO-07", "target": "clause:google_sre:SLO management \u2014 Error budget consumption and SLA breach det", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RO-07", "target": "clause:iso_22301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RO-07", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 RTO/RPO measurement and BCDR complianc", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RO-07", "target": "clause:nist_csf:ID.IM-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:resilience/RO-07", "target": "clause:nist_sp800_34:\u00a73.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RO-08", "target": "clause:aws_reliability:REL 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RO-08", "target": "clause:cobit_dss04:DSS04.08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RO-08", "target": "clause:dora:13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "partial" }, { "source": "control:resilience/RO-08", "target": "clause:google_sre:Postmortem practices \u2014 Structured incident report with timel", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RO-08", "target": "clause:iso_22301:9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RO-08", "target": "clause:iso_27031:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27031", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "partial" }, { "source": "control:resilience/RO-08", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Post-recovery documentation and compl", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RO-08", "target": "clause:nist_csf:ID.IM-04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:resilience/RO-08", "target": "clause:nist_sp800_34:\u00a73.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "partial" }, { "source": "control:resilience/RP-01", "target": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:resilience/RP-01", "target": "clause:aws_reliability:REL 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RP-01", "target": "clause:cobit_dss04:DSS04.01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RP-01", "target": "clause:dora:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RP-01", "target": "clause:google_sre:Production readiness review \u2014 Availability requirements", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RP-01", "target": "clause:iso_22301:8.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RP-01", "target": "clause:iso_27031:8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27031", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:resilience/RP-01", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Business continuity planning methodol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RP-01", "target": "clause:nist_csf:RC.RP-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RP-01", "target": "clause:nist_sp800_34:\u00a73.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RP-01", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven deployment decisions", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:resilience/RP-02", "target": "clause:aws_reliability:REL 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:resilience/RP-02", "target": "clause:dora:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RP-02", "target": "clause:google_sre:Incident management and Production Readiness Review", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RP-02", "target": "clause:iso_22301:8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RP-02", "target": "clause:iso_27031:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27031", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:resilience/RP-02", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Recovery objectives and failover conf", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RP-02", "target": "clause:nist_csf:RC.RP-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RP-02", "target": "clause:nist_sp800_34:\u00a73.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RP-03", "target": "clause:anthropic_rsp:ASL-3 Deployment Standard \u2014 deployment restrictions and de-d", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:resilience/RP-03", "target": "clause:aws_reliability:REL 8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2023" }, "confidence": "partial" }, { "source": "control:resilience/RP-03", "target": "clause:dora:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "partial" }, { "source": "control:resilience/RP-03", "target": "clause:google_sre:Production Readiness Review \u2014 Rollback readiness criteria", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RP-03", "target": "clause:microsoft_azure_resil:Failover configuration \u2014 Blue/green deployment and deploymen", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RP-03", "target": "clause:nist_csf:RC.RP-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RP-03", "target": "clause:nist_sp800_34:\u00a73.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RP-03", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard decisions affecting deployed mod", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:resilience/RP-04", "target": "clause:aws_reliability:REL 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:resilience/RP-04", "target": "clause:cis_controls_v8:CIS Control 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cis_controls_v8", "relation": "equivalent_to", "source_version": "v8" }, "confidence": "direct" }, { "source": "control:resilience/RP-04", "target": "clause:google_sre:Production Readiness Review \u2014 Data infrastructure recovery r", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RP-04", "target": "clause:iso_22301:8.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RP-04", "target": "clause:microsoft_azure_resil:RE:09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RP-04", "target": "clause:nist_csf:RC.RP-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RP-04", "target": "clause:nist_sp800_34:\u00a73.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RP-05", "target": "clause:aws_reliability:REL 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RP-05", "target": "clause:cobit_dss04:DSS04.02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RP-05", "target": "clause:dora:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RP-05", "target": "clause:google_sre:Error budget policies \u2014 Service tier definition by SLO", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RP-05", "target": "clause:iso_22301:8.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RP-05", "target": "clause:microsoft_azure_resil:Recovery objectives \u2014 Business continuity tiering by service", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RP-05", "target": "clause:nist_800_160_v2:Appendix D", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "partial" }, { "source": "control:resilience/RP-05", "target": "clause:nist_csf:ID.AM-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RP-05", "target": "clause:nist_sp800_34:\u00a73.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RP-05", "target": "clause:openai_preparedness:Capability thresholds \u2014 High and Critical capability levels", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:resilience/RP-06", "target": "clause:anthropic_rsp:Capability thresholds and ASL-3 standards \u2014 provider-initiat", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_rsp", "relation": "informs", "source_version": "3.3" }, "confidence": "adjacent" }, { "source": "control:resilience/RP-06", "target": "clause:aws_reliability:REL 5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RP-06", "target": "clause:cloudflare_resilience:Load balancing and failover \u2014 Health-based origin routing", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cloudflare_resilience", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RP-06", "target": "clause:dora:28", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RP-06", "target": "clause:google_sre:Cascading failure prevention", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RP-06", "target": "clause:iso_22301:8.3.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RP-06", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Geo-redundancy and failover configura", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RP-06", "target": "clause:nist_sp800_34:\u00a73.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RP-06", "target": "clause:openai_preparedness:\u00a74 Safeguarding \u2014 safeguard-driven availability changes", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "openai_preparedness", "relation": "informs", "source_version": "2" }, "confidence": "adjacent" }, { "source": "control:resilience/RP-07", "target": "clause:aws_reliability:REL 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RP-07", "target": "clause:cobit_dss04:DSS04.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RP-07", "target": "clause:dora:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RP-07", "target": "clause:google_sre:Disaster Recovery Testing (DiRT) and game days", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RP-07", "target": "clause:iso_22301:8.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RP-07", "target": "clause:iso_27031:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27031", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:resilience/RP-07", "target": "clause:microsoft_azure_resil:BCDR design guidance \u2014 Testing and validation program", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RP-07", "target": "clause:nist_csf:ID.IM-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RP-07", "target": "clause:nist_sp800_34:\u00a73.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RP-08", "target": "clause:cobit_dss04:DSS04.06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RP-08", "target": "clause:dora:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "partial" }, { "source": "control:resilience/RP-08", "target": "clause:iso_22301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RP-08", "target": "clause:iso_27031:10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27031", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:resilience/RP-08", "target": "clause:nist_csf:RC.RP-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RP-08", "target": "clause:nist_sp800_34:\u00a73.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RV-01", "target": "clause:aws_reliability:REL 9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RV-01", "target": "clause:cobit_dss04:DSS04.02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RV-01", "target": "clause:dora:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RV-01", "target": "clause:enisa_ai:Cybersecurity of AI and Standardisation (2023) \u2014 document-le", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "enisa_ai", "relation": "satisfies", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:resilience/RV-01", "target": "clause:google_sre:SLO/Error Budget Policy \u2013 Defining and enforcing availabilit", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RV-01", "target": "clause:iso_22301:8.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RV-01", "target": "clause:microsoft_azure_resil:BCDR \u2013 Recovery objectives (RTO/RPO) definition and validati", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RV-01", "target": "clause:nist_csf:RC.RP-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RV-01", "target": "clause:nist_sp800_34:\u00a73.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RV-02", "target": "clause:aws_reliability:REL 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RV-02", "target": "clause:cobit_dss04:DSS04.04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RV-02", "target": "clause:dora:25", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RV-02", "target": "clause:google_sre:Production Readiness Review \u2013 Reliability and resilience con", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RV-02", "target": "clause:iso_22301:8.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RV-02", "target": "clause:microsoft_azure_resil:BCDR \u2013 Testing and validation of failover and recovery contr", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RV-02", "target": "clause:nist_csf:RC.RP-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:resilience/RV-02", "target": "clause:nist_sp800_34:\u00a73.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RV-03", "target": "clause:aws_reliability:REL 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:resilience/RV-03", "target": "clause:dora:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "partial" }, { "source": "control:resilience/RV-03", "target": "clause:google_sre:Ch. 22", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RV-03", "target": "clause:microsoft_azure_resil:BCDR \u2013 Chaos testing and resilience validation (Azure Chaos", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RV-03", "target": "clause:nist_800_160_v2:\u00a72.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RV-03", "target": "clause:nist_csf:ID.IM-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:resilience/RV-04", "target": "clause:aws_reliability:REL 12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RV-04", "target": "clause:dora:17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "partial" }, { "source": "control:resilience/RV-04", "target": "clause:google_sre:Postmortem Culture \u2013 Blameless postmortems with tracked acti", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RV-04", "target": "clause:iso_22301:10.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RV-04", "target": "clause:iso_27031:11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27031", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:resilience/RV-04", "target": "clause:microsoft_azure_resil:BCDR \u2013 Post-incident review and recovery objective validatio", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RV-04", "target": "clause:nist_csf:ID.IM-04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RV-04", "target": "clause:nist_sp800_34:\u00a74.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RV-05", "target": "clause:aws_reliability:REL 1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RV-05", "target": "clause:cloudflare_resilience:Load balancing and failover \u2013 Multi-origin failover for AI A", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cloudflare_resilience", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:resilience/RV-05", "target": "clause:cobit_dss04:DSS04.03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RV-05", "target": "clause:dora:28", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RV-05", "target": "clause:google_sre:Production Readiness Review \u2013 Third-party dependency resilie", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RV-05", "target": "clause:iso_22301:8.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RV-05", "target": "clause:microsoft_azure_resil:BCDR \u2013 Third-party service dependency continuity planning", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RV-05", "target": "clause:nist_csf:GV.SC-07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:resilience/RV-05", "target": "clause:nist_sp800_34:\u00a73.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "partial" }, { "source": "control:resilience/RV-06", "target": "clause:aws_reliability:REL 10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:resilience/RV-06", "target": "clause:cloudflare_resilience:Load balancing and failover \u2013 Geo-distributed AI inference e", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cloudflare_resilience", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RV-06", "target": "clause:dora:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "direct" }, { "source": "control:resilience/RV-06", "target": "clause:google_sre:Error budget policies \u2013 Multi-region SLO maintenance and fai", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "partial" }, { "source": "control:resilience/RV-06", "target": "clause:iso_22301:8.4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RV-06", "target": "clause:microsoft_azure_resil:RE:05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "direct" }, { "source": "control:resilience/RV-06", "target": "clause:nist_csf:PR.IR-04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:resilience/RV-07", "target": "clause:aws_reliability:REL 11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2023" }, "confidence": "direct" }, { "source": "control:resilience/RV-07", "target": "clause:cloudflare_resilience:Rate limiting for API protection", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cloudflare_resilience", "relation": "informs", "source_version": "2024" }, "confidence": "adjacent" }, { "source": "control:resilience/RV-07", "target": "clause:google_sre:Ch. 22", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RV-07", "target": "clause:iso_22301:8.4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "partial" }, { "source": "control:resilience/RV-07", "target": "clause:microsoft_azure_resil:BCDR \u2013 Graceful degradation design and availability zone fai", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RV-07", "target": "clause:nist_800_160_v2:\u00a72.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_160_v2", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:resilience/RV-07", "target": "clause:nist_csf:RC.RP-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "adjacent" }, { "source": "control:resilience/RV-08", "target": "clause:aws_reliability:REL 13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "aws_reliability", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RV-08", "target": "clause:cobit_dss04:DSS04.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "cobit_dss04", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RV-08", "target": "clause:dora:30", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "dora", "relation": "satisfies", "source_version": "2022/2554" }, "confidence": "partial" }, { "source": "control:resilience/RV-08", "target": "clause:google_sre:Postmortem practices and PRR \u2013 Resilience evidence from SRE", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "google_sre", "relation": "informs", "source_version": "2016" }, "confidence": "direct" }, { "source": "control:resilience/RV-08", "target": "clause:iso_22301:9.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_22301", "relation": "equivalent_to", "source_version": "2019" }, "confidence": "direct" }, { "source": "control:resilience/RV-08", "target": "clause:microsoft_azure_resil:Business continuity planning \u2013 BCDR evidence documentation a", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "microsoft_azure_resil", "relation": "informs", "source_version": "2024" }, "confidence": "partial" }, { "source": "control:resilience/RV-08", "target": "clause:nist_csf:GV.RR-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "partial" }, { "source": "control:resilience/RV-08", "target": "clause:nist_sp800_34:\u00a73.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_sp800_34", "relation": "equivalent_to", "source_version": "Rev 1" }, "confidence": "direct" }, { "source": "control:security/AS-01", "target": "clause:csa_aicm:AIS-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/AS-01", "target": "clause:csa_aismm:APP-04.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-01", "target": "clause:csa_aismm:APP-05.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-01", "target": "clause:imda_mgf:2.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/AS-01", "target": "clause:imda_mgf:2.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/AS-01", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/AS-01", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/AS-01", "target": "clause:ncsc_cisa_secure_ai_2023:deployment.release-ai-responsibly", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ncsc_cisa_secure_ai_2023", "relation": "satisfies", "source_version": "2023" }, "confidence": "supporting" }, { "source": "control:security/AS-01", "target": "clause:nist_rmf:AI RMF: Measure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/AS-01", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/AS-01", "target": "clause:owasp_aisvs:C11.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/AS-01", "target": "clause:owasp_aisvs:C11.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/AS-01", "target": "clause:owasp_asi:ASI01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-02", "target": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Evaluate dependency health automatically (", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/AS-02", "target": "clause:csa_aicm:AIS-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/AS-02", "target": "clause:csa_aicm:CCC-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/AS-02", "target": "clause:csa_aismm:DEV-03.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-02", "target": "clause:csa_aismm:DEV-04.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-02", "target": "clause:imda_mgf:2.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/AS-02", "target": "clause:imda_mgf:2.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/AS-02", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/AS-02", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/AS-02", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/AS-02", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:security/AS-02", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/AS-02", "target": "clause:owasp_ai_exchange:secdevprogram", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/AS-02", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/AS-02", "target": "clause:owasp_aisvs:C6.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/AS-02", "target": "clause:owasp_aisvs:C6.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/AS-02", "target": "clause:owasp_asi:ASI04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-03", "target": "clause:csa_aicm:CCC-04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/AS-03", "target": "clause:csa_aismm:DEV-03.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-03", "target": "clause:csa_aismm:MOD-05.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-03", "target": "clause:eu_ai_act:9", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:security/AS-03", "target": "clause:imda_mgf:2.3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/AS-03", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/AS-03", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/AS-03", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/AS-03", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:security/AS-03", "target": "clause:owasp_aisvs:C11.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/AS-03", "target": "clause:owasp_aisvs:C11.1.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/AS-03", "target": "clause:owasp_aisvs:C3.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/AS-04", "target": "clause:csa_aicm:TVM (Threat & Vulnerability Management \u2014 Security Testing)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "adjacent" }, { "source": "control:security/AS-04", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/AS-04", "target": "clause:nist_rmf:AI RMF: Measure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/AS-04", "target": "clause:owasp_ai_exchange:secprogram", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/AS-05", "target": "clause:csa_aicm:MDS-06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/AS-05", "target": "clause:csa_aicm:MDS-12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/AS-05", "target": "clause:csa_aismm:MOD-02.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-05", "target": "clause:csa_aismm:RSK-05.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-05", "target": "clause:iso_42001:A.5.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/AS-05", "target": "clause:mitre:AML.M0008", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/AS-05", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/AS-05", "target": "clause:owasp_ai_exchange:continuousvalidation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/AS-06", "target": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 AI Bill of Material (model provenance, tra", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/AS-06", "target": "clause:csa_aicm:MDS-08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/AS-06", "target": "clause:csa_aicm:MDS-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/AS-06", "target": "clause:csa_aismm:DEV-04.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-06", "target": "clause:csa_aismm:MOD-04.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-06", "target": "clause:iso_42001:A.7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/AS-06", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/AS-06", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/AS-06", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:security/AS-06", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/AS-06", "target": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/AS-06", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:security/AS-06", "target": "clause:owasp_aisvs:C3.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/AS-06", "target": "clause:owasp_aisvs:C6.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/AS-06", "target": "clause:owasp_aisvs:C6.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/AS-06", "target": "clause:owasp_asi:ASI04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-06", "target": "clause:owasp_llm10:LLM03:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/AS-06", "target": "clause:owasp_llm10:LLM04:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/AS-07", "target": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Vendor assessments; Part II \u2014 Tool poisoni", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/AS-07", "target": "clause:csa_aicm:AIS-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/AS-07", "target": "clause:csa_aicm:STA-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/AS-07", "target": "clause:csa_aismm:APP-04.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-07", "target": "clause:csa_aismm:DEV-03.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-07", "target": "clause:csa_aismm:DEV-04.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-07", "target": "clause:imda_mgf:2.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/AS-07", "target": "clause:imda_mgf:2.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/AS-07", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/AS-07", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/AS-07", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/AS-07", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:security/AS-07", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/AS-07", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/AS-07", "target": "clause:owasp_aisvs:C6.1.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/AS-07", "target": "clause:owasp_aisvs:C9.3.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/AS-07", "target": "clause:owasp_asi:ASI02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-07", "target": "clause:owasp_asi:ASI04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/AS-08", "target": "clause:anthropic_zt_agents:Part V \u2014 Trust through verification for defensive agents", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/AS-08", "target": "clause:owasp_ai_exchange:secprogram", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/EC-01", "target": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (Sandboxed execution / Hardwa", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/EC-01", "target": "clause:csa_aicm:AIS-11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-01", "target": "clause:csa_aicm:AIS-13", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-01", "target": "clause:csa_aismm:APP-03.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-01", "target": "clause:imda_mgf:2.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/EC-01", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/EC-01", "target": "clause:iso_42001:A.4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/EC-01", "target": "clause:mitre_atlas:AML.M0032", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-01", "target": "clause:mitre_atlas:AML.T0105", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-01", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/EC-01", "target": "clause:owasp_aisvs:C4.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-01", "target": "clause:owasp_aisvs:C4.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-01", "target": "clause:owasp_aisvs:C9.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-01", "target": "clause:owasp_asi:ASI05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-02", "target": "clause:anthropic_zt_agents:Part III \u2014 Resource boundaries (block unnecessary east-west", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/EC-02", "target": "clause:csa_aicm:I&S-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-02", "target": "clause:csa_aicm:I&S-06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-02", "target": "clause:csa_aismm:INF-03.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-02", "target": "clause:imda_mgf:2.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/EC-02", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/EC-02", "target": "clause:mitre_atlas:AML.M0030", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-02", "target": "clause:mitre_atlas:AML.T0025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-02", "target": "clause:mitre_atlas:AML.T0086", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-02", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/EC-02", "target": "clause:owasp_aisvs:C7.3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/EC-02", "target": "clause:owasp_asi:ASI03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-02", "target": "clause:owasp_llm10:LLM02:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/EC-03", "target": "clause:anthropic_zt_agents:Part IV Phase 7 \u2014 Safeguard agent memory (Memory isolation;", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/EC-03", "target": "clause:csa_aicm:DSP-17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-03", "target": "clause:csa_aicm:DSP-21", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-03", "target": "clause:csa_aismm:DAT-05.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-03", "target": "clause:imda_mgf:2.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/EC-03", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/EC-03", "target": "clause:iso_42001:A.7.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/EC-03", "target": "clause:mitre_atlas:AML.M0030", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-03", "target": "clause:mitre_atlas:AML.M0031", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-03", "target": "clause:mitre_atlas:AML.T0080", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-03", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/EC-03", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/EC-03", "target": "clause:owasp_aisvs:C8.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-03", "target": "clause:owasp_aisvs:C8.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-03", "target": "clause:owasp_aisvs:C8.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-03", "target": "clause:owasp_aisvs:C9.4.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-03", "target": "clause:owasp_asi:ASI06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Scope limits / Least Agency; Part IV Phase", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:csa_aicm:AIS-11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-04", "target": "clause:csa_aicm:IAM-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-04", "target": "clause:csa_aismm:APP-03.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:csa_aismm:APP-04.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:imda_mgf:2.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:iso_42001:A.4.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/EC-04", "target": "clause:mitre_atlas:AML.M0028", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:mitre_atlas:AML.T0053", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:mitre_atlas:AML.T0098", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:mitre:AML.M0026", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/EC-04", "target": "clause:mitre:AML.M0027", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/EC-04", "target": "clause:mitre:AML.M0028", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/EC-04", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/EC-04", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:owasp_aisvs:C5.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:owasp_aisvs:C9.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:owasp_aisvs:C9.5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:owasp_asi:ASI02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-04", "target": "clause:owasp_asi:ASI05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-05", "target": "clause:anthropic_zt_agents:Part II \u2014 Resource exhaustion attacks; Part IV Phase 5 \u2014 Sec", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/EC-05", "target": "clause:csa_aicm:GRC (operational / cost risk)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "adjacent" }, { "source": "control:security/EC-05", "target": "clause:csa_aismm:APP-04.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-05", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/EC-05", "target": "clause:iso_42001:A.4.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/EC-05", "target": "clause:mitre_atlas:AML.M0004", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-05", "target": "clause:mitre_atlas:AML.T0034.002", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-05", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/EC-05", "target": "clause:owasp_ai_exchange:limitresources", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:security/EC-05", "target": "clause:owasp_aisvs:C12.2.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-05", "target": "clause:owasp_aisvs:C9.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-05", "target": "clause:owasp_aisvs:C9.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-05", "target": "clause:owasp_llm10:LLM10:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/EC-06", "target": "clause:anthropic_zt_agents:Part I \u2014 Least agency; Part II \u2014 Resource exhaustion attacks", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/EC-06", "target": "clause:csa_aicm:AIS-11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-06", "target": "clause:csa_aismm:APP-03.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-06", "target": "clause:csa_aismm:APP-04.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-06", "target": "clause:imda_mgf:2.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/EC-06", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/EC-06", "target": "clause:iso_42001:A.9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/EC-06", "target": "clause:mitre:AML.M0026", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/EC-06", "target": "clause:mitre:AML.M0027", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/EC-06", "target": "clause:mitre:AML.M0028", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/EC-06", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/EC-06", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/EC-06", "target": "clause:owasp_ai_exchange:limitresources", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/EC-06", "target": "clause:owasp_aisvs:C9.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-06", "target": "clause:owasp_aisvs:C9.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-06", "target": "clause:owasp_aisvs:C9.2.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-06", "target": "clause:owasp_asi:ASI01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-06", "target": "clause:owasp_asi:ASI10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-06", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation; Part II \u2014 RAG poisoning", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:csa_aicm:DSP-20", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-07", "target": "clause:csa_aicm:DSP-23", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-07", "target": "clause:csa_aismm:DAT-02.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:csa_aismm:DAT-04.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:csa_aismm:DAT-04.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:imda_mgf:2.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:iso_42001:A.7.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/EC-07", "target": "clause:mitre_atlas:AML.M0030", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:mitre_atlas:AML.M0031", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:mitre_atlas:AML.T0066", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:mitre_atlas:AML.T0070", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:mitre_atlas:AML.T0080", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:mitre_atlas:AML.T0100", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on retrieved content; Du", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ms_ifc_agents", "relation": "informs", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/EC-07", "target": "clause:owasp_ai_exchange:augdataintegrity", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/EC-07", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/EC-07", "target": "clause:owasp_aisvs:C5.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:owasp_aisvs:C8.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:owasp_aisvs:C9.3.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:owasp_asi:ASI06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-07", "target": "clause:owasp_llm10:LLM08:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/EC-08", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Credential isolation; Part IV Phase 6 \u2014 Pr", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/EC-08", "target": "clause:csa_aicm:DSP-10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-08", "target": "clause:csa_aicm:DSP-17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-08", "target": "clause:csa_aismm:APP-02.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-08", "target": "clause:csa_aismm:DAT-03.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-08", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/EC-08", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/EC-08", "target": "clause:mitre_atlas:AML.M0005", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-08", "target": "clause:mitre_atlas:AML.M0012", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-08", "target": "clause:mitre_atlas:AML.T0056", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-08", "target": "clause:mitre_atlas:AML.T0098", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-08", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/EC-08", "target": "clause:owasp_ai_exchange:dataminimize", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/EC-08", "target": "clause:owasp_aisvs:C7.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-08", "target": "clause:owasp_aisvs:C8.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-08", "target": "clause:owasp_aisvs:C9.5.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-08", "target": "clause:owasp_llm10:LLM07:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/EC-09", "target": "clause:anthropic_zt_agents:Part III \u2014 Configuration integrity", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/EC-09", "target": "clause:csa_aicm:AIS-11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-09", "target": "clause:csa_aicm:CCC-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/EC-09", "target": "clause:csa_aismm:APP-03.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-09", "target": "clause:csa_aismm:APP-03.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-09", "target": "clause:csa_aismm:DEV-03.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-09", "target": "clause:imda_mgf:2.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/EC-09", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/EC-09", "target": "clause:iso_42001:A.4.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/EC-09", "target": "clause:mitre_atlas:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-09", "target": "clause:mitre_atlas:AML.T0081", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/EC-09", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/EC-09", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/EC-09", "target": "clause:owasp_aisvs:C10.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-09", "target": "clause:owasp_aisvs:C9.2.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-09", "target": "clause:owasp_aisvs:C9.3.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-09", "target": "clause:owasp_asi:ASI02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-09", "target": "clause:owasp_asi:ASI04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-09", "target": "clause:owasp_asi:ASI05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/EC-10", "target": "clause:imda_mgf:2.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/EC-10", "target": "clause:mitre:AML.M0019", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/EC-10", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/EC-10", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "partial" }, { "source": "control:security/EC-10", "target": "clause:owasp_aisvs:C12.4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/EC-10", "target": "clause:owasp_aisvs:C9.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/EC-10", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/EC-11", "target": "clause:owasp_ai_exchange:confcompute", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:security/EC-11", "target": "clause:owasp_ai_exchange:runtimemodelintegrity", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/EC-11", "target": "clause:owasp_aisvs:C4.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-11", "target": "clause:owasp_aisvs:C4.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-11", "target": "clause:owasp_aisvs:C4.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-11", "target": "clause:owasp_aisvs:C4.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-11", "target": "clause:owasp_aisvs:C4.2.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-11", "target": "clause:owasp_aisvs:C4.3.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/EC-12", "target": "clause:eu_ai_act:15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "partial" }, { "source": "control:security/EC-12", "target": "clause:iso_27001:A.8.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_27001", "relation": "equivalent_to", "source_version": "2022" }, "confidence": "direct" }, { "source": "control:security/EC-12", "target": "clause:nist_800_53:RA-5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": "Rev. 5" }, "confidence": "direct" }, { "source": "control:security/EC-12", "target": "clause:nist_800_53:SI-2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": "Rev. 5" }, "confidence": "direct" }, { "source": "control:security/EC-12", "target": "clause:nist_800_53:SI-2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_800_53", "relation": "equivalent_to", "source_version": "Rev. 5" }, "confidence": "direct" }, { "source": "control:security/EC-12", "target": "clause:nist_csf:ID.RA-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "direct" }, { "source": "control:security/EC-12", "target": "clause:nist_csf:ID.RA-06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_csf", "relation": "equivalent_to", "source_version": "2.0" }, "confidence": "supporting" }, { "source": "control:security/GV-01", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Approval escalation; Part IV Phase 3 \u2014 Esc", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/GV-01", "target": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "adjacent" }, { "source": "control:security/GV-01", "target": "clause:csa_aismm:APP-04.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-01", "target": "clause:csa_aismm:IR-04.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-01", "target": "clause:imda_mgf:2.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/GV-01", "target": "clause:iso_42001:A.9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/GV-01", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-01", "target": "clause:mitre:AML.M0029", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-01", "target": "clause:mitre:AML.M0030", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-01", "target": "clause:nist_rmf:AI RMF: Govern", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/GV-01", "target": "clause:owasp_ai_exchange:oversight", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:security/GV-01", "target": "clause:owasp_aisvs:C9.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-01", "target": "clause:owasp_aisvs:C9.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-01", "target": "clause:owasp_aisvs:C9.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-01", "target": "clause:owasp_aisvs:C9.6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-01", "target": "clause:owasp_asi:ASI02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-01", "target": "clause:owasp_asi:ASI10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-02", "target": "clause:anthropic_zt_agents:Part III \u2014 Action logging (Immutable audit trails with integ", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/GV-02", "target": "clause:csa_aicm:LOG-07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/GV-02", "target": "clause:csa_aicm:LOG-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/GV-02", "target": "clause:csa_aismm:IR-05.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-02", "target": "clause:csa_aismm:MON-04.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-02", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:security/GV-02", "target": "clause:eu_ai_act:19", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:security/GV-02", "target": "clause:eu_ai_act:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:security/GV-02", "target": "clause:imda_mgf:2.3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/GV-02", "target": "clause:iso_42001:A.6.2.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/GV-02", "target": "clause:mitre_atlas:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-02", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-02", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/GV-02", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/GV-02", "target": "clause:owasp_aisvs:C12.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-02", "target": "clause:owasp_aisvs:C12.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-02", "target": "clause:owasp_aisvs:C12.5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-02", "target": "clause:owasp_asi:ASI08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-03", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part II \u2014 Unsco", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/GV-03", "target": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "adjacent" }, { "source": "control:security/GV-03", "target": "clause:csa_aismm:IAM-05.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-03", "target": "clause:imda_mgf:2.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/GV-03", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/GV-03", "target": "clause:iso_42001:A.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/GV-03", "target": "clause:nist_rmf:AI RMF: Govern, Map", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/GV-03", "target": "clause:owasp_aisvs:C9.2.10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-03", "target": "clause:owasp_aisvs:C9.5.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-03", "target": "clause:owasp_asi:ASI08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-04", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Continuous policy enforce", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/GV-04", "target": "clause:csa_aicm:CCC-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/GV-04", "target": "clause:csa_aicm:GRC-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/GV-04", "target": "clause:csa_aismm:APP-04.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-04", "target": "clause:csa_aismm:IAM-05.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-04", "target": "clause:csa_aismm:ORG-05.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-04", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/GV-04", "target": "clause:iso_42001:A.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/GV-04", "target": "clause:mitre:AML.M0019", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-04", "target": "clause:ms_ifc_agents:Information-flow control \u2014 Check before acting: a policy eng", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ms_ifc_agents", "relation": "informs", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-04", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/GV-04", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/GV-04", "target": "clause:owasp_aisvs:C9.5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-04", "target": "clause:owasp_aisvs:C9.5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-04", "target": "clause:owasp_asi:ASI01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-04", "target": "clause:owasp_asi:ASI02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-05", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (formal governance framewo", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/GV-05", "target": "clause:csa_aicm:GRC-01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/GV-05", "target": "clause:csa_aicm:GRC-02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/GV-05", "target": "clause:csa_aismm:GOV-03.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-05", "target": "clause:csa_aismm:GOV-05.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-05", "target": "clause:csa_aismm:RSK-02.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-05", "target": "clause:imda_mgf:2.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/GV-05", "target": "clause:imda_mgf:2.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/GV-05", "target": "clause:iso_42001:A.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/GV-05", "target": "clause:nist_rmf:AI RMF: Govern; AI 600-1; COSAiS overlays (forthcoming)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/GV-05", "target": "clause:owasp_ai_exchange:aiprogram", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:security/GV-05", "target": "clause:owasp_ai_exchange:secprogram", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/GV-06", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (rate limiting, spendin", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/GV-06", "target": "clause:csa_aicm:GRC (Governance, Risk & Compliance)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "adjacent" }, { "source": "control:security/GV-06", "target": "clause:csa_aismm:APP-04.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-06", "target": "clause:imda_mgf:2.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/GV-06", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/GV-06", "target": "clause:iso_42001:A.9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/GV-06", "target": "clause:mitre:AML.M0004", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-06", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/GV-06", "target": "clause:owasp_ai_exchange:ratelimit", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/GV-06", "target": "clause:owasp_aisvs:C11.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-06", "target": "clause:owasp_aisvs:C9.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-06", "target": "clause:owasp_aisvs:C9.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/GV-06", "target": "clause:owasp_asi:ASI08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-07", "target": "clause:csa_aicm:GRC (Governance, Risk & Compliance); UEM (Universal Endpoint", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "adjacent" }, { "source": "control:security/GV-07", "target": "clause:csa_aismm:APP-04.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/GV-07", "target": "clause:imda_mgf:2.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/GV-07", "target": "clause:iso_42001:A.8.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/GV-07", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-07", "target": "clause:mitre:AML.M0029", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-07", "target": "clause:mitre:AML.M0030", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-07", "target": "clause:nist_rmf:AI RMF: Govern, Measure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/GV-07", "target": "clause:owasp_ai_exchange:aitransparency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/GV-07", "target": "clause:owasp_ai_exchange:oversight", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/GV-07", "target": "clause:owasp_aisvs:C7.4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/GV-07", "target": "clause:owasp_aisvs:C7.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/GV-07", "target": "clause:owasp_aisvs:C7.4.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/GV-07", "target": "clause:owasp_asi:ASI09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-08", "target": "clause:csa_aicm:IAM-15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/GV-08", "target": "clause:csa_aismm:APP-04.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-08", "target": "clause:csa_aismm:IAM-05.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-08", "target": "clause:imda_mgf:2.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/GV-08", "target": "clause:iso_42001:A.9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/GV-08", "target": "clause:mitre_atlas:AML.M0026", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/GV-08", "target": "clause:mitre_atlas:AML.M0029", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/GV-08", "target": "clause:mitre_atlas:AML.T0101", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/GV-08", "target": "clause:mitre:AML.M0019", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-08", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/GV-08", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/GV-08", "target": "clause:owasp_aisvs:C9.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/GV-08", "target": "clause:owasp_aisvs:C9.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/GV-08", "target": "clause:owasp_aisvs:C9.2.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/GV-08", "target": "clause:owasp_asi:ASI03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-08", "target": "clause:owasp_asi:ASI08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-09", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Document who approves age", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/GV-09", "target": "clause:csa_aicm:GRC-06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/GV-09", "target": "clause:csa_aicm:IAM-12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/GV-09", "target": "clause:csa_aismm:GOV-04.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/GV-09", "target": "clause:csa_aismm:IAM-02.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/GV-09", "target": "clause:imda_mgf:2.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/GV-09", "target": "clause:iso_42001:A.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/GV-09", "target": "clause:nist_rmf:AI RMF: Govern", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/GV-09", "target": "clause:owasp_ai_exchange:aiprogram", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/GV-10", "target": "clause:csa_aismm:GOV-03.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/GV-10", "target": "clause:csa_aismm:GOV-04.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/GV-10", "target": "clause:imda_mgf:2.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/GV-10", "target": "clause:imda_mgf:2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/GV-10", "target": "clause:iso_42001:A.9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/GV-10", "target": "clause:mitre_atlas:AML.M0018", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-10", "target": "clause:mitre:AML.M0018", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-10", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-10", "target": "clause:mitre:AML.M0029", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-10", "target": "clause:mitre:AML.M0030", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/GV-10", "target": "clause:nist_rmf:AI RMF: Govern", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/GV-10", "target": "clause:owasp_ai_exchange:aitransparency", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/GV-10", "target": "clause:owasp_ai_exchange:oversight", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/GV-10", "target": "clause:owasp_ai_exchange:seceducate", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/GV-10", "target": "clause:owasp_aisvs:C7.4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/GV-10", "target": "clause:owasp_aisvs:C9.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/GV-10", "target": "clause:owasp_asi:ASI09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/GV-10", "target": "clause:owasp_llm10:LLM06:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/GV-11", "target": "clause:anthropic_zt_agents:Part III \u2014 Recovery capabilities", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/GV-11", "target": "clause:csa_aismm:INF-04.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/GV-11", "target": "clause:csa_aismm:IR-02.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/GV-11", "target": "clause:imda_mgf:2.3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/GV-11", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/GV-11", "target": "clause:owasp_aisvs:C3.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/GV-11", "target": "clause:owasp_aisvs:C3.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/GV-11", "target": "clause:owasp_aisvs:C9.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/GV-11", "target": "clause:owasp_asi:ASI08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-01", "target": "clause:anthropic_zt_agents:Part III \u2014 Agent identity verification; Part IV Phase 3 \u2014 As", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/IA-01", "target": "clause:csa_aicm:IAM-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/IA-01", "target": "clause:csa_aicm:IAM-12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/IA-01", "target": "clause:csa_aismm:IAM-02.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-01", "target": "clause:csa_aismm:IAM-03.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-01", "target": "clause:csa_aismm:IAM-04.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-01", "target": "clause:imda_mgf:2.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/IA-01", "target": "clause:imda_mgf:2.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/IA-01", "target": "clause:iso_42001:A.9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/IA-01", "target": "clause:mitre:AML.M0019", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/IA-01", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/IA-01", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/IA-01", "target": "clause:owasp_aisvs:C5.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/IA-01", "target": "clause:owasp_aisvs:C9.4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/IA-01", "target": "clause:owasp_asi:ASI03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-01", "target": "clause:owasp_nhi:NHI10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_nhi", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/IA-02", "target": "clause:anthropic_zt_agents:Part III \u2014 Service authentication (short-lived tokens from a", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/IA-02", "target": "clause:csa_aicm:IAM-10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/IA-02", "target": "clause:csa_aicm:IAM-14", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/IA-02", "target": "clause:csa_aismm:IAM-05.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-02", "target": "clause:imda_mgf:2.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/IA-02", "target": "clause:imda_mgf:2.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/IA-02", "target": "clause:iso_42001:A.9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/IA-02", "target": "clause:mitre:AML.M0019", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/IA-02", "target": "clause:mitre:AML.M0026", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/IA-02", "target": "clause:mitre:AML.M0027", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/IA-02", "target": "clause:mitre:AML.M0028", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/IA-02", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/IA-02", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/IA-02", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/IA-02", "target": "clause:owasp_aisvs:C5.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/IA-02", "target": "clause:owasp_aisvs:C9.4.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/IA-02", "target": "clause:owasp_aisvs:C9.5.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/IA-02", "target": "clause:owasp_asi:ASI03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-02", "target": "clause:owasp_nhi:NHI7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_nhi", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/IA-03", "target": "clause:anthropic_zt_agents:Part IV Phase 3 \u2014 Escalation triggers; Part IV Phase 5 \u2014 App", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/IA-03", "target": "clause:csa_aicm:IAM-12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/IA-03", "target": "clause:csa_aicm:IAM-15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/IA-03", "target": "clause:csa_aismm:IAM-04.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-03", "target": "clause:imda_mgf:2.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/IA-03", "target": "clause:imda_mgf:2.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/IA-03", "target": "clause:iso_42001:A.9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/IA-03", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/IA-03", "target": "clause:mitre:AML.M0029", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/IA-03", "target": "clause:mitre:AML.M0030", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/IA-03", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/IA-03", "target": "clause:owasp_ai_exchange:oversight", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/IA-03", "target": "clause:owasp_aisvs:C9.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/IA-03", "target": "clause:owasp_aisvs:C9.5.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/IA-03", "target": "clause:owasp_asi:ASI02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-03", "target": "clause:owasp_asi:ASI03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-04", "target": "clause:anthropic_zt_agents:Part III \u2014 Access control and privilege management (continuo", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/IA-04", "target": "clause:csa_aicm:IAM-08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/IA-04", "target": "clause:csa_aicm:IAM-15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/IA-04", "target": "clause:csa_aismm:IAM-04.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-04", "target": "clause:csa_aismm:IAM-05.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-04", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/IA-04", "target": "clause:iso_42001:A.9.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/IA-04", "target": "clause:mitre_atlas:AML.M0026", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/IA-04", "target": "clause:mitre_atlas:AML.M0027", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/IA-04", "target": "clause:mitre:AML.M0019", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/IA-04", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/IA-04", "target": "clause:owasp_ai_exchange:modelaccesscontrol", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/IA-04", "target": "clause:owasp_aisvs:C5.2.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/IA-04", "target": "clause:owasp_aisvs:C9.5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/IA-04", "target": "clause:owasp_aisvs:C9.5.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/IA-04", "target": "clause:owasp_aisvs:C9.5.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/IA-04", "target": "clause:owasp_asi:ASI03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-05", "target": "clause:anthropic_zt_agents:Part III \u2014 AI governance policies (Address Shadow AI); Part", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/IA-05", "target": "clause:csa_aicm:CCC-06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/IA-05", "target": "clause:csa_aicm:IAM-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/IA-05", "target": "clause:csa_aismm:IAM-02.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-05", "target": "clause:csa_aismm:ORG-02.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-05", "target": "clause:csa_aismm:ORG-04.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-05", "target": "clause:imda_mgf:2.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/IA-05", "target": "clause:iso_42001:A.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/IA-05", "target": "clause:nist_rmf:AI RMF: Map", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/IA-05", "target": "clause:owasp_ai_exchange:secprogram", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/IA-05", "target": "clause:owasp_aisvs:C3.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/IA-05", "target": "clause:owasp_asi:ASI10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/IA-06", "target": "clause:anthropic_zt_agents:Part III \u2014 Traceability (Full provenance chains from input t", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/IA-06", "target": "clause:csa_aicm:LOG-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "adjacent" }, { "source": "control:security/IA-06", "target": "clause:csa_aismm:IAM-05.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/IA-06", "target": "clause:csa_aismm:MON-04.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/IA-06", "target": "clause:eu_ai_act:12", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:security/IA-06", "target": "clause:eu_ai_act:19", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:security/IA-06", "target": "clause:eu_ai_act:26", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "eu_ai_act", "relation": "satisfies", "source_version": "2024/1689" }, "confidence": "adjacent" }, { "source": "control:security/IA-06", "target": "clause:imda_mgf:2.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/IA-06", "target": "clause:imda_mgf:2.3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/IA-06", "target": "clause:iso_42001:A.6.2.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/IA-06", "target": "clause:nist_rmf:AI RMF: Govern, Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/IA-06", "target": "clause:owasp_aisvs:C9.2.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/IA-06", "target": "clause:owasp_aisvs:C9.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/IA-06", "target": "clause:owasp_asi:ASI08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-01", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries; Part III \u2014 Agen", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/PT-01", "target": "clause:csa_aicm:AIS-11", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/PT-01", "target": "clause:csa_aismm:APP-03.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-01", "target": "clause:csa_aismm:IAM-05.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-01", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/PT-01", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/PT-01", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/PT-01", "target": "clause:owasp_aisvs:C9.4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-01", "target": "clause:owasp_aisvs:C9.5.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-01", "target": "clause:owasp_asi:ASI07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-02", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Secure tool access (Tool allow-listing); P", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/PT-02", "target": "clause:csa_aicm:IAM-15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/PT-02", "target": "clause:csa_aicm:IAM-18", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/PT-02", "target": "clause:csa_aismm:APP-03.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-02", "target": "clause:csa_aismm:IAM-03.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-02", "target": "clause:csa_aismm:IAM-04.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-02", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/PT-02", "target": "clause:iso_42001:A.4.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/PT-02", "target": "clause:mitre_atlas:AML.M0028", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/PT-02", "target": "clause:mitre_atlas:AML.T0053", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/PT-02", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-02", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-02", "target": "clause:mitre:AML.M0026", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-02", "target": "clause:mitre:AML.M0027", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-02", "target": "clause:mitre:AML.M0028", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-02", "target": "clause:ms_ifc_agents:Integrating IFC into agentic orchestrators and tools \u2014 Commu", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ms_ifc_agents", "relation": "informs", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/PT-02", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:security/PT-02", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/PT-02", "target": "clause:owasp_ai_exchange:leastmodelprivilege", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/PT-02", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/PT-02", "target": "clause:owasp_aisvs:C10.1.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-02", "target": "clause:owasp_aisvs:C10.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-02", "target": "clause:owasp_aisvs:C10.2.5", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-02", "target": "clause:owasp_aisvs:C10.3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-02", "target": "clause:owasp_aisvs:C10.3.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-02", "target": "clause:owasp_asi:ASI02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:anthropic_zt_agents:Part IV Phase 2 \u2014 Manage supply chain risks (Cryptographic s", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:csa_aicm:STA-08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/PT-03", "target": "clause:csa_aicm:STA-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/PT-03", "target": "clause:csa_aismm:DEV-02.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:csa_aismm:DEV-03.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:csa_aismm:DEV-04.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:imda_mgf:2.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/PT-03", "target": "clause:iso_42001:A.10.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/PT-03", "target": "clause:mitre_atlas:AML.M0013", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:mitre_atlas:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:mitre_atlas:AML.T0099", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:mitre_atlas:AML.T0104", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-03", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-03", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:security/PT-03", "target": "clause:nist_rmf:AI RMF: Map, Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/PT-03", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:owasp_aisvs:C10.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:owasp_aisvs:C6.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:owasp_aisvs:C9.3.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:owasp_asi:ASI04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:owasp_llm10:LLM03:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/PT-03", "target": "clause:owasp_nhi:NHI3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_nhi", "relation": "equivalent_to", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/PT-04", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation; Part III \u2014 Input san", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/PT-04", "target": "clause:csa_aicm:AIS-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/PT-04", "target": "clause:csa_aicm:AIS-10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/PT-04", "target": "clause:csa_aismm:APP-02.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-04", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/PT-04", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/PT-04", "target": "clause:mitre_atlas:AML.M0033", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-04", "target": "clause:mitre:AML.M0015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-04", "target": "clause:ms_ifc_agents:Integrity label (trusted/untrusted) on ingested and tool-ret", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ms_ifc_agents", "relation": "informs", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/PT-04", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/PT-04", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/PT-04", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/PT-04", "target": "clause:owasp_aisvs:C10.4.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-04", "target": "clause:owasp_aisvs:C10.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-04", "target": "clause:owasp_aisvs:C9.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-04", "target": "clause:owasp_asi:ASI01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-04", "target": "clause:owasp_asi:ASI02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-05", "target": "clause:anthropic_zt_agents:Part III \u2014 Output filtering", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/PT-05", "target": "clause:csa_aicm:AIS-10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/PT-05", "target": "clause:csa_aicm:AIS-15", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/PT-05", "target": "clause:csa_aismm:APP-02.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-05", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/PT-05", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/PT-05", "target": "clause:mitre:AML.M0002", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-05", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/PT-05", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:security/PT-05", "target": "clause:owasp_aisvs:C7.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-05", "target": "clause:owasp_aisvs:C7.3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-05", "target": "clause:owasp_aisvs:C7.3.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-05", "target": "clause:owasp_asi:ASI08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-05", "target": "clause:owasp_llm10:LLM05:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/PT-06", "target": "clause:anthropic_zt_agents:Part IV Phase 5 \u2014 Parameter validation (sanitize model-gener", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/PT-06", "target": "clause:csa_aicm:AIS-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/PT-06", "target": "clause:csa_aicm:AIS-10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/PT-06", "target": "clause:csa_aismm:APP-02.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-06", "target": "clause:csa_aismm:APP-04.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-06", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/PT-06", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/PT-06", "target": "clause:mitre_atlas:AML.M0033", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/PT-06", "target": "clause:mitre_atlas:AML.T0053", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/PT-06", "target": "clause:mitre:AML.M0002", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-06", "target": "clause:mitre:AML.M0015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-06", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/PT-06", "target": "clause:owasp_ai_exchange:encodemodeloutput", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/PT-06", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/PT-06", "target": "clause:owasp_aisvs:C10.4.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-06", "target": "clause:owasp_aisvs:C9.5.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-06", "target": "clause:owasp_asi:ASI02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-06", "target": "clause:owasp_asi:ASI05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-07", "target": "clause:anthropic_zt_agents:Part II \u2014 Tool poisoning (MCP tool descriptors, schemas, met", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/PT-07", "target": "clause:csa_aicm:AIS-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/PT-07", "target": "clause:csa_aicm:STA-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/PT-07", "target": "clause:csa_aismm:APP-02.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-07", "target": "clause:csa_aismm:APP-03.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-07", "target": "clause:imda_mgf:2.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/PT-07", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/PT-07", "target": "clause:iso_42001:A.6.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/PT-07", "target": "clause:mitre_atlas:AML.M0033", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/PT-07", "target": "clause:mitre_atlas:AML.T0053", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/PT-07", "target": "clause:mitre:AML.M0014", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-07", "target": "clause:mitre:AML.M0015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-07", "target": "clause:mitre:AML.M0023", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-07", "target": "clause:nist_ai_100_2:NISTAML.05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_ai_100_2", "relation": "defends_against", "source_version": "100-2e2025" }, "confidence": "supporting" }, { "source": "control:security/PT-07", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/PT-07", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/PT-07", "target": "clause:owasp_ai_exchange:supplychainmanage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/PT-07", "target": "clause:owasp_aisvs:C10.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-07", "target": "clause:owasp_aisvs:C10.4.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-07", "target": "clause:owasp_asi:ASI01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-07", "target": "clause:owasp_asi:ASI02", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-07", "target": "clause:owasp_asi:ASI04", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-08", "target": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Input isolation (spotlighting; treat untru", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/PT-08", "target": "clause:csa_aismm:APP-02.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/PT-08", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/PT-08", "target": "clause:mitre_atlas:AML.M0030", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/PT-08", "target": "clause:mitre_atlas:AML.T0051", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/PT-08", "target": "clause:mitre_atlas:AML.T0080", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/PT-08", "target": "clause:mitre:AML.M0015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/PT-08", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/PT-08", "target": "clause:owasp_ai_exchange:inputsegregation", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:security/PT-08", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/PT-08", "target": "clause:owasp_aisvs:C10.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-08", "target": "clause:owasp_aisvs:C2.1.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/PT-08", "target": "clause:owasp_asi:ASI01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/PT-08", "target": "clause:owasp_llm10:LLM01:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/RT-01", "target": "clause:anthropic_zt_agents:Part III \u2014 Action logging; Part III \u2014 Observability and audi", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/RT-01", "target": "clause:csa_aicm:LOG-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/RT-01", "target": "clause:csa_aicm:LOG-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/RT-01", "target": "clause:csa_aismm:INF-04.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-01", "target": "clause:csa_aismm:MON-02.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-01", "target": "clause:csa_aismm:MON-03.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-01", "target": "clause:imda_mgf:2.3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/RT-01", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/RT-01", "target": "clause:mitre_atlas:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/RT-01", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/RT-01", "target": "clause:nist_rmf:AI RMF: Measure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/RT-01", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/RT-01", "target": "clause:owasp_aisvs:C12.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-01", "target": "clause:owasp_aisvs:C12.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-02", "target": "clause:anthropic_zt_agents:Part IV Phase 4 \u2014 Defend against prompt injection (Input iso", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/RT-02", "target": "clause:csa_aicm:AIS-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/RT-02", "target": "clause:csa_aicm:LOG-03", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/RT-02", "target": "clause:csa_aismm:MON-03.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-02", "target": "clause:csa_aismm:MON-04.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-02", "target": "clause:imda_mgf:2.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/RT-02", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/RT-02", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/RT-02", "target": "clause:mitre_atlas:AML.M0015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/RT-02", "target": "clause:mitre_atlas:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/RT-02", "target": "clause:mitre_atlas:AML.T0051", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/RT-02", "target": "clause:mitre:AML.M0015", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/RT-02", "target": "clause:ms_ifc_agents:Information-flow control as a deterministic defense against", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ms_ifc_agents", "relation": "informs", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/RT-02", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/RT-02", "target": "clause:owasp_ai_exchange:promptinjectioniohandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:security/RT-02", "target": "clause:owasp_aisvs:C10.4.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-02", "target": "clause:owasp_aisvs:C12.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-02", "target": "clause:owasp_aisvs:C2.1.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-02", "target": "clause:owasp_asi:ASI01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-02", "target": "clause:owasp_llm10:LLM01:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/RT-03", "target": "clause:anthropic_zt_agents:Part III \u2014 Behavioral monitoring and response; Part III \u2014 Tr", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "partial" }, { "source": "control:security/RT-03", "target": "clause:csa_aicm:LOG-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/RT-03", "target": "clause:csa_aismm:MON-04.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-03", "target": "clause:csa_aismm:MON-05.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-03", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/RT-03", "target": "clause:imda_mgf:2.3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/RT-03", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/RT-03", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/RT-03", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/RT-03", "target": "clause:mitre:AML.M0029", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/RT-03", "target": "clause:mitre:AML.M0030", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/RT-03", "target": "clause:nist_rmf:AI RMF: Measure, Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/RT-03", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/RT-03", "target": "clause:owasp_ai_exchange:oversight", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/RT-03", "target": "clause:owasp_aisvs:C9.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-03", "target": "clause:owasp_aisvs:C9.2.7", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-03", "target": "clause:owasp_asi:ASI01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-04", "target": "clause:anthropic_zt_agents:Part III \u2014 Anomaly detection; Part III \u2014 Automated response", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/RT-04", "target": "clause:csa_aicm:SEF-06", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/RT-04", "target": "clause:csa_aicm:SEF-09", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/RT-04", "target": "clause:csa_aismm:IR-04.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-04", "target": "clause:csa_aismm:IR-05.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-04", "target": "clause:imda_mgf:2.3.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/RT-04", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/RT-04", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/RT-04", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/RT-04", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/RT-04", "target": "clause:owasp_aisvs:C12.2.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-04", "target": "clause:owasp_aisvs:C9.3.8", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-04", "target": "clause:owasp_aisvs:C9.6.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-04", "target": "clause:owasp_asi:ASI10", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-05", "target": "clause:anthropic_zt_agents:Part III \u2014 Output filtering (scan/block PII, credentials, se", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/RT-05", "target": "clause:csa_aicm:DSP-17", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/RT-05", "target": "clause:csa_aicm:LOG-16", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/RT-05", "target": "clause:csa_aismm:DAT-03.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-05", "target": "clause:csa_aismm:MON-04.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-05", "target": "clause:imda_mgf:2.2.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/RT-05", "target": "clause:imda_mgf:2.3.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "direct" }, { "source": "control:security/RT-05", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/RT-05", "target": "clause:mitre_atlas:AML.T0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/RT-05", "target": "clause:mitre_atlas:AML.T0057", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/RT-05", "target": "clause:mitre_atlas:AML.T0086", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/RT-05", "target": "clause:mitre:AML.M0020", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/RT-05", "target": "clause:ms_ifc_agents:Confidentiality label (public/confidential/read-access list)", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "ms_ifc_agents", "relation": "informs", "source_version": "2026" }, "confidence": "partial" }, { "source": "control:security/RT-05", "target": "clause:nist_rmf:AI RMF: Manage", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/RT-05", "target": "clause:owasp_ai_exchange:sensitiveoutputhandling", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "direct" }, { "source": "control:security/RT-05", "target": "clause:owasp_aisvs:C12.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-05", "target": "clause:owasp_aisvs:C5.2.4", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-05", "target": "clause:owasp_aisvs:C7.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-05", "target": "clause:owasp_llm10:LLM02:2025", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_llm10", "relation": "defends_against", "source_version": "2025" }, "confidence": "direct" }, { "source": "control:security/RT-06", "target": "clause:anthropic_zt_agents:Part V \u2014 Map detection coverage against MITRE ATT&CK", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "direct" }, { "source": "control:security/RT-06", "target": "clause:csa_aicm:LOG-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/RT-06", "target": "clause:csa_aicm:TVM-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/RT-06", "target": "clause:csa_aismm:IR-04.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-06", "target": "clause:csa_aismm:MON-05.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-06", "target": "clause:imda_mgf:2.1.1", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/RT-06", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/RT-06", "target": "clause:mitre_atlas:AML.T0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/RT-06", "target": "clause:mitre_atlas:AML.T0053", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/RT-06", "target": "clause:mitre_atlas:AML.T0070", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/RT-06", "target": "clause:mitre_atlas:AML.T0080", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/RT-06", "target": "clause:mitre_atlas:AML.T0086", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/RT-06", "target": "clause:mitre_atlas:AML.T0104", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "direct" }, { "source": "control:security/RT-06", "target": "clause:nist_rmf:AI RMF: Map, Measure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/RT-06", "target": "clause:owasp_ai_exchange:secprogram", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/RT-06", "target": "clause:owasp_aisvs:C12.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "partial" }, { "source": "control:security/RT-07", "target": "clause:anthropic_zt_agents:Part IV Phase 6 \u2014 Explicit trust boundaries (log all inter-a", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "anthropic_zt_agents", "relation": "informs", "source_version": "2026-05-18" }, "confidence": "adjacent" }, { "source": "control:security/RT-07", "target": "clause:csa_aicm:LOG-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/RT-07", "target": "clause:csa_aismm:MON-05.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-07", "target": "clause:imda_mgf:1.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/RT-07", "target": "clause:imda_mgf:2.3.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "imda_mgf", "relation": "satisfies", "source_version": "1.5" }, "confidence": "adjacent" }, { "source": "control:security/RT-07", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/RT-07", "target": "clause:mitre_atlas:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre_atlas", "relation": "defends_against", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/RT-07", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/RT-07", "target": "clause:nist_rmf:AI RMF: Measure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/RT-07", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/RT-07", "target": "clause:owasp_aisvs:C12.2.3", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-07", "target": "clause:owasp_aisvs:C12.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_aisvs", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "direct" }, { "source": "control:security/RT-07", "target": "clause:owasp_asi:ASI07", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-07", "target": "clause:owasp_asi:ASI08", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-08", "target": "clause:csa_aicm:LOG-05", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aicm", "relation": "equivalent_to", "source_version": "1.1" }, "confidence": "partial" }, { "source": "control:security/RT-08", "target": "clause:csa_aismm:MON-05.2", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "csa_aismm", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "control:security/RT-08", "target": "clause:iso_42001:A.6.2.6", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "iso_42001", "relation": "equivalent_to", "source_version": "2023" }, "confidence": "adjacent" }, { "source": "control:security/RT-08", "target": "clause:mitre:AML.M0024", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "mitre", "relation": "equivalent_to", "source_version": "v2026.06" }, "confidence": "supporting" }, { "source": "control:security/RT-08", "target": "clause:nist_rmf:AI RMF: Measure", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "nist_rmf", "relation": "equivalent_to", "source_version": "1.0" }, "confidence": "adjacent" }, { "source": "control:security/RT-08", "target": "clause:owasp_ai_exchange:monitoruse", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_ai_exchange", "relation": "equivalent_to", "source_version": "continuously-updated" }, "confidence": "supporting" }, { "source": "control:security/RT-08", "target": "clause:owasp_asi:ASI01", "type": "mapped_to", "provenance": { "source": "corpus", "framework": "owasp_asi", "relation": "equivalent_to", "source_version": "2026" }, "confidence": "direct" }, { "source": "AML.T0000", "target": "AML.M0000", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0002", "target": "AML.M0000", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0002.000", "target": "AML.M0001", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0002.001", "target": "AML.M0001", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0002.001", "target": "AML.M0014", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0003", "target": "AML.M0000", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0004", "target": "AML.M0000", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005", "target": "AML.M0000", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005", "target": "AML.M0001", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005", "target": "AML.M0002", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005", "target": "AML.M0019", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005.000", "target": "AML.M0000", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005.000", "target": "AML.M0001", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005.001", "target": "AML.M0002", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005.001", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005.001", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0005.002", "target": "AML.M0000", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0007", "target": "AML.M0005", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0007", "target": "AML.M0012", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010", "target": "AML.M0014", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010", "target": "AML.M0020", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010", "target": "AML.M0023", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.001", "target": "AML.M0006", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.001", "target": "AML.M0013", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.002", "target": "AML.M0005", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.002", "target": "AML.M0007", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.002", "target": "AML.M0014", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.002", "target": "AML.M0025", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.003", "target": "AML.M0005", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.003", "target": "AML.M0006", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.003", "target": "AML.M0008", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.003", "target": "AML.M0013", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0010.003", "target": "AML.M0017", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011", "target": "AML.M0011", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011", "target": "AML.M0014", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011", "target": "AML.M0016", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011", "target": "AML.M0018", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011", "target": "AML.M0023", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.000", "target": "AML.M0011", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.000", "target": "AML.M0013", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.000", "target": "AML.M0014", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.000", "target": "AML.M0016", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.000", "target": "AML.M0018", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.000", "target": "AML.M0023", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.001", "target": "AML.M0011", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.001", "target": "AML.M0013", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.001", "target": "AML.M0016", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.001", "target": "AML.M0018", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0011.001", "target": "AML.M0023", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0013", "target": "AML.M0002", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0013", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0014", "target": "AML.M0002", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0014", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0014", "target": "AML.M0006", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0015", "target": "AML.M0003", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0015", "target": "AML.M0006", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0015", "target": "AML.M0009", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0015", "target": "AML.M0010", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0015", "target": "AML.M0015", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0015", "target": "AML.M0034", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018", "target": "AML.M0005", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018", "target": "AML.M0008", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018", "target": "AML.M0013", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.000", "target": "AML.M0005", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.000", "target": "AML.M0007", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.000", "target": "AML.M0008", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.000", "target": "AML.M0013", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.000", "target": "AML.M0025", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.001", "target": "AML.M0005", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.001", "target": "AML.M0008", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.001", "target": "AML.M0013", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0018.002", "target": "AML.M0013", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0019", "target": "AML.M0014", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0019", "target": "AML.M0023", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0019", "target": "AML.M0025", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0020", "target": "AML.M0001", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0020", "target": "AML.M0005", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0020", "target": "AML.M0007", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0020", "target": "AML.M0008", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0020", "target": "AML.M0023", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0020", "target": "AML.M0025", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024", "target": "AML.M0019", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024.000", "target": "AML.M0002", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024.000", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024.000", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024.001", "target": "AML.M0002", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024.001", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024.001", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024.002", "target": "AML.M0002", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024.002", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0024.002", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0025", "target": "AML.M0005", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0029", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0029", "target": "AML.M0015", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0029", "target": "AML.M0019", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0031", "target": "AML.M0003", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0031", "target": "AML.M0006", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0031", "target": "AML.M0010", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0031", "target": "AML.M0015", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0034", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0034", "target": "AML.M0019", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0035", "target": "AML.M0001", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0035", "target": "AML.M0005", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0035", "target": "AML.M0012", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0035", "target": "AML.M0017", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0040", "target": "AML.M0019", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0040", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0041", "target": "AML.M0009", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0042", "target": "AML.M0002", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0042", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0042", "target": "AML.M0005", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0042", "target": "AML.M0019", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043", "target": "AML.M0002", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043", "target": "AML.M0003", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043", "target": "AML.M0006", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043", "target": "AML.M0008", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043", "target": "AML.M0010", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043", "target": "AML.M0015", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043", "target": "AML.M0019", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.000", "target": "AML.M0003", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.000", "target": "AML.M0005", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.000", "target": "AML.M0006", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.000", "target": "AML.M0010", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.000", "target": "AML.M0015", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.000", "target": "AML.M0017", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.001", "target": "AML.M0002", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.001", "target": "AML.M0003", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.001", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.001", "target": "AML.M0006", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.001", "target": "AML.M0010", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.001", "target": "AML.M0015", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.001", "target": "AML.M0019", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.002", "target": "AML.M0003", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.002", "target": "AML.M0006", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.002", "target": "AML.M0010", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.002", "target": "AML.M0015", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.003", "target": "AML.M0003", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.003", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.003", "target": "AML.M0006", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.003", "target": "AML.M0010", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.003", "target": "AML.M0015", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.004", "target": "AML.M0003", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.004", "target": "AML.M0006", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.004", "target": "AML.M0008", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.004", "target": "AML.M0010", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0043.004", "target": "AML.M0015", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0044", "target": "AML.M0005", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0044", "target": "AML.M0017", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0046", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0046", "target": "AML.M0019", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0047", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0048.004", "target": "AML.M0005", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0048.004", "target": "AML.M0012", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0048.004", "target": "AML.M0017", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051", "target": "AML.M0019", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051", "target": "AML.M0020", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051", "target": "AML.M0021", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051", "target": "AML.M0022", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051", "target": "AML.M0033", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051.000", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051.000", "target": "AML.M0033", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051.001", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051.001", "target": "AML.M0033", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051.002", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0051.002", "target": "AML.M0033", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0052", "target": "AML.M0018", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0052", "target": "AML.M0034", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0052.000", "target": "AML.M0018", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0052.000", "target": "AML.M0034", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0052.001", "target": "AML.M0018", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0052.001", "target": "AML.M0034", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0053", "target": "AML.M0020", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0053", "target": "AML.M0021", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0053", "target": "AML.M0022", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0053", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0053", "target": "AML.M0026", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0053", "target": "AML.M0027", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0053", "target": "AML.M0028", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0053", "target": "AML.M0029", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0053", "target": "AML.M0030", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0053", "target": "AML.M0032", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0053", "target": "AML.M0033", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0054", "target": "AML.M0020", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0054", "target": "AML.M0021", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0054", "target": "AML.M0022", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0056", "target": "AML.M0020", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0056", "target": "AML.M0021", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0056", "target": "AML.M0022", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0057", "target": "AML.M0008", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0057", "target": "AML.M0020", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0057", "target": "AML.M0021", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0057", "target": "AML.M0022", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0058", "target": "AML.M0023", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0059", "target": "AML.M0007", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0059", "target": "AML.M0025", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0061", "target": "AML.M0020", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0061", "target": "AML.M0021", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0061", "target": "AML.M0022", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0062", "target": "AML.M0004", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0062", "target": "AML.M0020", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0062", "target": "AML.M0021", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0062", "target": "AML.M0022", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0063", "target": "AML.M0002", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0063", "target": "AML.M0012", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0063", "target": "AML.M0017", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0063", "target": "AML.M0019", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0080", "target": "AML.M0031", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0080.000", "target": "AML.M0031", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0082", "target": "AML.M0026", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0082", "target": "AML.M0027", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085", "target": "AML.M0026", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085", "target": "AML.M0027", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085", "target": "AML.M0028", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085", "target": "AML.M0032", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085.000", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085.000", "target": "AML.M0026", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085.000", "target": "AML.M0027", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085.000", "target": "AML.M0032", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085.001", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085.001", "target": "AML.M0026", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085.001", "target": "AML.M0027", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085.001", "target": "AML.M0028", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0085.001", "target": "AML.M0032", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0086", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0086", "target": "AML.M0026", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0086", "target": "AML.M0027", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0086", "target": "AML.M0028", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0086", "target": "AML.M0029", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0086", "target": "AML.M0030", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0086", "target": "AML.M0032", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0086", "target": "AML.M0033", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0088", "target": "AML.M0009", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0088", "target": "AML.M0034", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0098", "target": "AML.M0032", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0101", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0101", "target": "AML.M0026", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0101", "target": "AML.M0027", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0101", "target": "AML.M0028", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0101", "target": "AML.M0029", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0101", "target": "AML.M0030", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" }, { "source": "AML.T0114", "target": "AML.M0024", "type": "mitigated_by", "provenance": { "source": "mitre_atlas", "release": "v2026.06" }, "confidence": "high" } ] }