{ "meta": { "schema_version": "1.0.0", "generated_from": [ "12 control matrices", "source_registry.json" ], "method": "Multi-axis strengths. distinctiveness = sum(1/sources-per-control); depth = avg assessed fit-weight; depth-leader = unique strongest fit on a multi-source control; specialist = >=50% of a source's weight in one domain at depth>=0.6; corroboration = >=12 direct-fit confirmations on controls others also cover (independent assurance, a strength). 'light' = no strength AND thin+shallow (never a label for corroboration).", "sources": 171, "tiers": { "backbone": 7, "distinctive": 108, "context": 19, "light": 37 } }, "sources": [ { "framework": "eu_ai_act", "source_id": "eu_ai_act", "status": "current", "controls": 330, "domains": 11, "depth": 0.8, "distinctiveness": 47.6, "distinct_ratio": 0.14, "depth_leader_of": [ "finance", "ethics" ], "unique_controls": 0, "scarce_controls": 1, "corroborates": 194, "top_domain": "ethics", "specialization": 0.16, "strengths": [ "backbone", "depth-leader:finance", "depth-leader:ethics", "corroboration" ], "tier": "backbone" }, { "framework": "iso_42001", "source_id": "iso_42001", "status": "current", "controls": 281, "domains": 9, "depth": 0.69, "distinctiveness": 38.9, "distinct_ratio": 0.14, "depth_leader_of": [ "authority", "knowledge" ], "unique_controls": 0, "scarce_controls": 0, "corroborates": 116, "top_domain": "knowledge", "specialization": 0.22, "strengths": [ "backbone", "depth-leader:authority", "depth-leader:knowledge", "corroboration" ], "tier": "backbone" }, { "framework": "nist_rmf", "source_id": "nist_rmf", "status": "current", "controls": 245, "domains": 8, "depth": 0.66, "distinctiveness": 31.3, "distinct_ratio": 0.13, "depth_leader_of": [ "model" ], "unique_controls": 0, "scarce_controls": 1, "corroborates": 89, "top_domain": "ethics", "specialization": 0.26, "strengths": [ "backbone", "depth-leader:model", "corroboration" ], "tier": "backbone" }, { "framework": "microsoft_rai", "source_id": "microsoft_rai", "status": "current", "controls": 214, "domains": 6, "depth": 0.61, "distinctiveness": 26.6, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 21, "top_domain": "agentic", "specialization": 0.24, "strengths": [ "corroboration" ], "tier": "distinctive" }, { "framework": "mitre_atlas", "source_id": "mitre_atlas", "status": "current", "controls": 149, "domains": 8, "depth": 0.39, "distinctiveness": 25.6, "distinct_ratio": 0.17, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 3, "corroborates": 28, "top_domain": "security", "specialization": 0.46, "strengths": [ "backbone", "unique", "corroboration" ], "tier": "backbone" }, { "framework": "owasp_ai_exchange", "source_id": "owasp_ai_exchange", "status": "current", "controls": 171, "domains": 6, "depth": 0.46, "distinctiveness": 22, "distinct_ratio": 0.13, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 1, "corroborates": 42, "top_domain": "security", "specialization": 0.31, "strengths": [ "backbone", "corroboration" ], "tier": "backbone" }, { "framework": "gdpr", "source_id": "gdpr", "status": "current", "controls": 106, "domains": 3, "depth": 0.85, "distinctiveness": 15.8, "distinct_ratio": 0.15, "depth_leader_of": [ "privacy" ], "unique_controls": 0, "scarce_controls": 0, "corroborates": 78, "top_domain": "privacy", "specialization": 0.52, "strengths": [ "specialist:privacy", "depth-leader:privacy", "corroboration" ], "tier": "distinctive" }, { "framework": "anthropic_zt_agents", "source_id": "anthropic_zt_agents", "status": "current", "controls": 132, "domains": 4, "depth": 0.8, "distinctiveness": 14.7, "distinct_ratio": 0.11, "depth_leader_of": [ "agentic" ], "unique_controls": 0, "scarce_controls": 1, "corroborates": 78, "top_domain": "agentic", "specialization": 0.39, "strengths": [ "depth-leader:agentic", "corroboration" ], "tier": "distinctive" }, { "framework": "dama_dmbok", "source_id": "dama_dmbok", "status": "current", "controls": 77, "domains": 2, "depth": 0.89, "distinctiveness": 14.1, "distinct_ratio": 0.18, "depth_leader_of": [ "data" ], "unique_controls": 0, "scarce_controls": 0, "corroborates": 57, "top_domain": "data", "specialization": 0.57, "strengths": [ "specialist:data", "depth-leader:data", "corroboration" ], "tier": "distinctive" }, { "framework": "csa_aicm", "source_id": "csa_aicm", "status": "current", "controls": 113, "domains": 7, "depth": 0.56, "distinctiveness": 12.6, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 22, "top_domain": "model", "specialization": 0.46, "strengths": [ "corroboration" ], "tier": "distinctive" }, { "framework": "anthropic_rsp", "source_id": "anthropic_rsp", "status": "current", "controls": 98, "domains": 7, "depth": 0.41, "distinctiveness": 10.8, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 4, "top_domain": "compliance", "specialization": 0.4, "strengths": [], "tier": "context" }, { "framework": "iso_37301", "source_id": "iso_37301", "status": "current", "controls": 85, "domains": 2, "depth": 0.81, "distinctiveness": 10.7, "distinct_ratio": 0.13, "depth_leader_of": [ "compliance" ], "unique_controls": 0, "scarce_controls": 0, "corroborates": 49, "top_domain": "compliance", "specialization": 0.64, "strengths": [ "specialist:compliance", "depth-leader:compliance", "corroboration" ], "tier": "distinctive" }, { "framework": "google_saif", "source_id": "google_saif", "status": "current", "controls": 83, "domains": 4, "depth": 0.6, "distinctiveness": 10.2, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 17, "top_domain": "agentic", "specialization": 0.58, "strengths": [ "specialist:agentic", "corroboration" ], "tier": "distinctive" }, { "framework": "cobit_2019", "source_id": "cobit_2019", "status": "current", "controls": 70, "domains": 2, "depth": 0.79, "distinctiveness": 9.8, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 35, "top_domain": "compliance", "specialization": 0.59, "strengths": [ "specialist:compliance", "corroboration" ], "tier": "distinctive" }, { "framework": "aiuc_1", "source_id": "aiuc_1", "status": "current", "controls": 71, "domains": 10, "depth": 0.49, "distinctiveness": 9.1, "distinct_ratio": 0.13, "depth_leader_of": [], "unique_controls": 1, "scarce_controls": 1, "corroborates": 19, "top_domain": "agentic", "specialization": 0.24, "strengths": [ "backbone", "unique", "corroboration" ], "tier": "backbone" }, { "framework": "pillar_sail", "source_id": "pillar_sail", "status": "current", "controls": 72, "domains": 8, "depth": 0.53, "distinctiveness": 8.8, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 1, "corroborates": 11, "top_domain": "security", "specialization": 0.41, "strengths": [], "tier": "context" }, { "framework": "owasp_aisvs", "source_id": "owasp_aisvs", "status": "current", "controls": 68, "domains": 4, "depth": 0.71, "distinctiveness": 8.7, "distinct_ratio": 0.13, "depth_leader_of": [ "security" ], "unique_controls": 0, "scarce_controls": 0, "corroborates": 53, "top_domain": "security", "specialization": 0.77, "strengths": [ "specialist:security", "depth-leader:security", "corroboration" ], "tier": "distinctive" }, { "framework": "sr26_2", "source_id": "sr26_2", "status": "current", "controls": 71, "domains": 2, "depth": 0.78, "distinctiveness": 8.4, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 37, "top_domain": "finance", "specialization": 0.64, "strengths": [ "specialist:finance", "corroboration" ], "tier": "distinctive" }, { "framework": "nist_pf", "source_id": "nist_pf", "status": "current", "controls": 50, "domains": 2, "depth": 0.64, "distinctiveness": 8.2, "distinct_ratio": 0.16, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 20, "top_domain": "privacy", "specialization": 0.55, "strengths": [ "specialist:privacy", "corroboration" ], "tier": "distinctive" }, { "framework": "nist_800_53", "source_id": "nist_800_53", "status": "current", "controls": 44, "domains": 6, "depth": 0.51, "distinctiveness": 7.7, "distinct_ratio": 0.17, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 10, "top_domain": "authority", "specialization": 0.64, "strengths": [ "backbone" ], "tier": "backbone" }, { "framework": "nist_csf", "source_id": "nist_csf", "status": "current", "controls": 52, "domains": 3, "depth": 0.7, "distinctiveness": 7, "distinct_ratio": 0.13, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 25, "top_domain": "resilience", "specialization": 0.73, "strengths": [ "specialist:resilience", "corroboration" ], "tier": "distinctive" }, { "framework": "dora", "source_id": "dora", "status": "current", "controls": 47, "domains": 2, "depth": 0.77, "distinctiveness": 6.8, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 23, "top_domain": "resilience", "specialization": 0.99, "strengths": [ "specialist:resilience", "corroboration" ], "tier": "distinctive" }, { "framework": "okta_iam", "source_id": "okta_iam", "status": "current", "controls": 44, "domains": 2, "depth": 0.7, "distinctiveness": 6.7, "distinct_ratio": 0.15, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 13, "top_domain": "identity", "specialization": 0.78, "strengths": [ "specialist:identity", "corroboration" ], "tier": "distinctive" }, { "framework": "iso_27701", "source_id": "iso_27701", "status": "current", "controls": 40, "domains": 2, "depth": 0.86, "distinctiveness": 6.7, "distinct_ratio": 0.17, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 31, "top_domain": "privacy", "specialization": 0.63, "strengths": [ "specialist:privacy", "corroboration" ], "tier": "distinctive" }, { "framework": "owasp_llm10", "source_id": "owasp_llm10", "status": "current", "controls": 61, "domains": 6, "depth": 0.67, "distinctiveness": 6.4, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 1, "corroborates": 28, "top_domain": "security", "specialization": 0.35, "strengths": [ "corroboration" ], "tier": "distinctive" }, { "framework": "coso_erm", "source_id": "coso_erm", "status": "current", "controls": 54, "domains": 2, "depth": 0.61, "distinctiveness": 6.4, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 13, "top_domain": "compliance", "specialization": 0.71, "strengths": [ "specialist:compliance", "corroboration" ], "tier": "distinctive" }, { "framework": "soc2", "source_id": "soc2", "status": "current", "controls": 56, "domains": 3, "depth": 0.65, "distinctiveness": 6.4, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 15, "top_domain": "compliance", "specialization": 0.61, "strengths": [ "specialist:compliance", "corroboration" ], "tier": "distinctive" }, { "framework": "google_sre", "source_id": "google_sre", "status": "current", "controls": 45, "domains": 1, "depth": 0.81, "distinctiveness": 6.3, "distinct_ratio": 0.14, "depth_leader_of": [ "resilience" ], "unique_controls": 0, "scarce_controls": 0, "corroborates": 26, "top_domain": "resilience", "specialization": 1, "strengths": [ "specialist:resilience", "depth-leader:resilience", "corroboration" ], "tier": "distinctive" }, { "framework": "owasp_asi_2026", "source_id": "owasp_asi_2026", "status": "current", "controls": 61, "domains": 4, "depth": 0.7, "distinctiveness": 6.1, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 39, "top_domain": "security", "specialization": 0.9, "strengths": [ "specialist:security", "corroboration" ], "tier": "distinctive" }, { "framework": "nist_800_63", "source_id": "nist_800_63", "status": "current", "controls": 39, "domains": 1, "depth": 0.78, "distinctiveness": 6, "distinct_ratio": 0.15, "depth_leader_of": [ "identity" ], "unique_controls": 0, "scarce_controls": 0, "corroborates": 18, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity", "depth-leader:identity", "corroboration" ], "tier": "distinctive" }, { "framework": "aws_organizations", "source_id": "aws_organizations", "status": "current", "controls": 43, "domains": 1, "depth": 0.56, "distinctiveness": 5.9, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "authority", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "aws_iam", "source_id": "aws_iam", "status": "current", "controls": 38, "domains": 1, "depth": 0.65, "distinctiveness": 5.8, "distinct_ratio": 0.15, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 6, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity" ], "tier": "distinctive" }, { "framework": "aws_reliability", "source_id": "aws_reliability", "status": "current", "controls": 42, "domains": 1, "depth": 0.81, "distinctiveness": 5.7, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 24, "top_domain": "resilience", "specialization": 1, "strengths": [ "specialist:resilience", "corroboration" ], "tier": "distinctive" }, { "framework": "iso_30401", "source_id": "iso_30401", "status": "current", "controls": 28, "domains": 1, "depth": 0.93, "distinctiveness": 5.6, "distinct_ratio": 0.2, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 24, "top_domain": "knowledge", "specialization": 1, "strengths": [ "specialist:knowledge", "corroboration" ], "tier": "distinctive" }, { "framework": "google_financial", "source_id": "google_financial", "status": "current", "controls": 45, "domains": 1, "depth": 0.53, "distinctiveness": 5.5, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "finance", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "aws_privacy", "source_id": "aws_privacy", "status": "current", "controls": 35, "domains": 1, "depth": 0.51, "distinctiveness": 5.3, "distinct_ratio": 0.15, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 2, "top_domain": "privacy", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "aws_financial", "source_id": "aws_financial", "status": "current", "controls": 43, "domains": 1, "depth": 0.53, "distinctiveness": 5.2, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "finance", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "openai_preparedness", "source_id": "openai_preparedness", "status": "current", "controls": 47, "domains": 3, "depth": 0.3, "distinctiveness": 5.1, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "agentic", "specialization": 0.57, "strengths": [], "tier": "context" }, { "framework": "google_org_policy", "source_id": "google_org_policy", "status": "current", "controls": 37, "domains": 1, "depth": 0.58, "distinctiveness": 5.1, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "authority", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "microsoft_compliance", "source_id": "microsoft_compliance", "status": "current", "controls": 46, "domains": 1, "depth": 0.77, "distinctiveness": 5.1, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 23, "top_domain": "compliance", "specialization": 1, "strengths": [ "specialist:compliance", "corroboration" ], "tier": "distinctive" }, { "framework": "microsoft_azure_resil", "source_id": "microsoft_azure_resil", "status": "current", "controls": 38, "domains": 1, "depth": 0.75, "distinctiveness": 4.9, "distinct_ratio": 0.13, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 15, "top_domain": "resilience", "specialization": 1, "strengths": [ "specialist:resilience", "corroboration" ], "tier": "distinctive" }, { "framework": "iso_22301", "source_id": "iso_22301", "status": "current", "controls": 37, "domains": 1, "depth": 0.92, "distinctiveness": 4.8, "distinct_ratio": 0.13, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 31, "top_domain": "resilience", "specialization": 1, "strengths": [ "specialist:resilience", "corroboration" ], "tier": "distinctive" }, { "framework": "nist_sp800_34", "source_id": "nist_sp800_34", "status": "current", "controls": 34, "domains": 1, "depth": 0.86, "distinctiveness": 4.5, "distinct_ratio": 0.13, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 24, "top_domain": "resilience", "specialization": 1, "strengths": [ "specialist:resilience", "corroboration" ], "tier": "distinctive" }, { "framework": "google_ai_principles", "source_id": "google_ai_principles", "status": "current", "controls": 40, "domains": 1, "depth": 0.6, "distinctiveness": 4.5, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 4, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "coso_icfr", "source_id": "coso_icfr", "status": "current", "controls": 35, "domains": 1, "depth": 0.83, "distinctiveness": 4.3, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 24, "top_domain": "finance", "specialization": 1, "strengths": [ "specialist:finance", "corroboration" ], "tier": "distinctive" }, { "framework": "imda_mgf", "source_id": "imda_mgf", "status": "current", "controls": 48, "domains": 1, "depth": 0.71, "distinctiveness": 4.2, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 28, "top_domain": "security", "specialization": 1, "strengths": [ "specialist:security", "corroboration" ], "tier": "distinctive" }, { "framework": "nist_zt", "source_id": "nist_zt", "status": "current", "controls": 28, "domains": 1, "depth": 0.86, "distinctiveness": 4.2, "distinct_ratio": 0.15, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 20, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity", "corroboration" ], "tier": "distinctive" }, { "framework": "sox", "source_id": "sox", "status": "current", "controls": 35, "domains": 1, "depth": 0.82, "distinctiveness": 4.2, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 22, "top_domain": "finance", "specialization": 1, "strengths": [ "specialist:finance", "corroboration" ], "tier": "distinctive" }, { "framework": "csa_aismm", "source_id": "csa_aismm", "status": "current", "controls": 48, "domains": 1, "depth": 0.93, "distinctiveness": 4.1, "distinct_ratio": 0.08, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 40, "top_domain": "security", "specialization": 1, "strengths": [ "specialist:security", "corroboration" ], "tier": "distinctive" }, { "framework": "cisa_zt", "source_id": "cisa_zt", "status": "current", "controls": 27, "domains": 1, "depth": 0.75, "distinctiveness": 4.1, "distinct_ratio": 0.15, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 14, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity", "corroboration" ], "tier": "distinctive" }, { "framework": "anthropic_privacy", "source_id": "anthropic_privacy", "status": "current", "controls": 27, "domains": 2, "depth": 0.39, "distinctiveness": 3.8, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 2, "top_domain": "privacy", "specialization": 0.73, "strengths": [], "tier": "light" }, { "framework": "databricks_unity", "source_id": "databricks_unity", "status": "current", "controls": 21, "domains": 2, "depth": 0.63, "distinctiveness": 3.7, "distinct_ratio": 0.17, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 6, "top_domain": "data", "specialization": 0.7, "strengths": [ "specialist:data" ], "tier": "distinctive" }, { "framework": "openai_enterprise", "source_id": "openai_enterprise", "status": "current", "controls": 31, "domains": 1, "depth": 0.57, "distinctiveness": 3.6, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "finance", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "oecd_ai_principles", "source_id": "oecd_ai_principles", "status": "current", "controls": 30, "domains": 1, "depth": 0.72, "distinctiveness": 3.5, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 11, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "dcam", "source_id": "dcam", "status": "current", "controls": 21, "domains": 1, "depth": 0.94, "distinctiveness": 3.5, "distinct_ratio": 0.17, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 18, "top_domain": "data", "specialization": 1, "strengths": [ "specialist:data", "corroboration" ], "tier": "distinctive" }, { "framework": "nist_ai_100_2", "source_id": "nist_ai_100_2", "status": "current", "controls": 30, "domains": 4, "depth": 0.41, "distinctiveness": 3.4, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 5, "top_domain": "model", "specialization": 0.58, "strengths": [], "tier": "light" }, { "framework": "nist_800_160_v2", "source_id": "nist_800_160_v2", "status": "current", "controls": 18, "domains": 2, "depth": 0.84, "distinctiveness": 3.4, "distinct_ratio": 0.19, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 13, "top_domain": "resilience", "specialization": 0.98, "strengths": [ "specialist:resilience", "corroboration" ], "tier": "distinctive" }, { "framework": "openai_privacy", "source_id": "openai_privacy", "status": "current", "controls": 24, "domains": 1, "depth": 0.4, "distinctiveness": 3.4, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "privacy", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "itil_4", "source_id": "itil_4", "status": "current", "controls": 17, "domains": 1, "depth": 0.68, "distinctiveness": 3.4, "distinct_ratio": 0.2, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 8, "top_domain": "knowledge", "specialization": 1, "strengths": [ "specialist:knowledge" ], "tier": "distinctive" }, { "framework": "w3c_prov", "source_id": "w3c_prov", "status": "current", "controls": 17, "domains": 2, "depth": 0.76, "distinctiveness": 3.3, "distinct_ratio": 0.2, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 10, "top_domain": "knowledge", "specialization": 0.98, "strengths": [ "specialist:knowledge" ], "tier": "distinctive" }, { "framework": "cobit_dss04", "source_id": "cobit_dss04", "status": "current", "controls": 25, "domains": 1, "depth": 0.79, "distinctiveness": 3.2, "distinct_ratio": 0.13, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 12, "top_domain": "resilience", "specialization": 1, "strengths": [ "specialist:resilience", "corroboration" ], "tier": "distinctive" }, { "framework": "ieee_7000", "source_id": "ieee_7000", "status": "current", "controls": 27, "domains": 1, "depth": 0.79, "distinctiveness": 3.1, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 14, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics", "corroboration" ], "tier": "distinctive" }, { "framework": "aws_artifact", "source_id": "aws_artifact", "status": "current", "controls": 29, "domains": 1, "depth": 0.59, "distinctiveness": 2.9, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 4, "top_domain": "compliance", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "bcbs_239", "source_id": "bcbs_239", "status": "current", "controls": 20, "domains": 1, "depth": 0.6, "distinctiveness": 2.9, "distinct_ratio": 0.15, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 4, "top_domain": "finance", "specialization": 1, "strengths": [ "specialist:finance" ], "tier": "distinctive" }, { "framework": "iso_27002", "source_id": "iso_27002", "status": "current", "controls": 14, "domains": 1, "depth": 0.79, "distinctiveness": 2.9, "distinct_ratio": 0.2, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 8, "top_domain": "knowledge", "specialization": 1, "strengths": [ "specialist:knowledge" ], "tier": "distinctive" }, { "framework": "nist_sp800_53", "source_id": "nist_sp800_53", "status": "current", "controls": 5, "domains": 2, "depth": 0.3, "distinctiveness": 2.8, "distinct_ratio": 0.57, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 5, "corroborates": 0, "top_domain": "security", "specialization": 0.83, "strengths": [ "unique" ], "tier": "distinctive" }, { "framework": "ccpa", "source_id": "ccpa", "status": "current", "controls": 19, "domains": 1, "depth": 0.75, "distinctiveness": 2.8, "distinct_ratio": 0.15, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 8, "top_domain": "privacy", "specialization": 1, "strengths": [ "specialist:privacy" ], "tier": "distinctive" }, { "framework": "okta_governance", "source_id": "okta_governance", "status": "current", "controls": 27, "domains": 1, "depth": 0.62, "distinctiveness": 2.8, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 5, "top_domain": "compliance", "specialization": 1, "strengths": [ "specialist:compliance" ], "tier": "distinctive" }, { "framework": "owasp_ai_testing_guide_v1", "source_id": "owasp_ai_testing_guide_v1", "status": "current", "controls": 26, "domains": 1, "depth": 0.69, "distinctiveness": 2.7, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 9, "top_domain": "model", "specialization": 1, "strengths": [ "specialist:model" ], "tier": "distinctive" }, { "framework": "csa_nhi_2026", "source_id": "csa_nhi_2026", "status": "current", "controls": 24, "domains": 2, "depth": 0.53, "distinctiveness": 2.7, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "identity", "specialization": 0.57, "strengths": [], "tier": "context" }, { "framework": "openai_policies", "source_id": "openai_policies", "status": "current", "controls": 27, "domains": 1, "depth": 0.54, "distinctiveness": 2.7, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 3, "top_domain": "compliance", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "nvidia_secure_agent_workspace_ra", "source_id": "nvidia_secure_agent_workspace_ra", "status": "current", "controls": 23, "domains": 3, "depth": 0.4, "distinctiveness": 2.4, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 2, "top_domain": "security", "specialization": 0.69, "strengths": [], "tier": "light" }, { "framework": "okta_authz", "source_id": "okta_authz", "status": "current", "controls": 18, "domains": 1, "depth": 0.57, "distinctiveness": 2.4, "distinct_ratio": 0.13, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "authority", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "google_compliance", "source_id": "google_compliance", "status": "current", "controls": 25, "domains": 1, "depth": 0.63, "distinctiveness": 2.4, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 4, "top_domain": "compliance", "specialization": 1, "strengths": [ "specialist:compliance" ], "tier": "distinctive" }, { "framework": "ping_identity", "source_id": "ping_identity", "status": "current", "controls": 15, "domains": 1, "depth": 0.79, "distinctiveness": 2.3, "distinct_ratio": 0.16, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 7, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity" ], "tier": "distinctive" }, { "framework": "iso_24760", "source_id": "iso_24760", "status": "current", "controls": 14, "domains": 1, "depth": 0.97, "distinctiveness": 2.3, "distinct_ratio": 0.17, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 13, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity", "corroboration" ], "tier": "distinctive" }, { "framework": "openai_model_spec", "source_id": "openai_model_spec", "status": "current", "controls": 23, "domains": 1, "depth": 0.61, "distinctiveness": 2.3, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 3, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "microsoft_purview", "source_id": "microsoft_purview", "status": "current", "controls": 14, "domains": 1, "depth": 0.71, "distinctiveness": 2.3, "distinct_ratio": 0.16, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 6, "top_domain": "data", "specialization": 1, "strengths": [ "specialist:data" ], "tier": "distinctive" }, { "framework": "ibm_ai_fairness", "source_id": "ibm_ai_fairness", "status": "current", "controls": 19, "domains": 1, "depth": 0.72, "distinctiveness": 2.1, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 7, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "meta_llama_rai", "source_id": "meta_llama_rai", "status": "current", "controls": 19, "domains": 1, "depth": 0.6, "distinctiveness": 1.9, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 3, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "aws_bedrock_kb", "source_id": "aws_bedrock_kb", "status": "current", "controls": 10, "domains": 1, "depth": 0.56, "distinctiveness": 1.9, "distinct_ratio": 0.19, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 2, "top_domain": "knowledge", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "nist_ai_600_1", "source_id": "nist_ai_600_1", "status": "current", "controls": 19, "domains": 2, "depth": 0.76, "distinctiveness": 1.8, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 9, "top_domain": "agentic", "specialization": 0.63, "strengths": [ "specialist:agentic" ], "tier": "distinctive" }, { "framework": "openid", "source_id": "openid", "status": "current", "controls": 12, "domains": 1, "depth": 0.92, "distinctiveness": 1.8, "distinct_ratio": 0.15, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 11, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity" ], "tier": "distinctive" }, { "framework": "iso_8000", "source_id": "iso_8000", "status": "current", "controls": 13, "domains": 1, "depth": 0.74, "distinctiveness": 1.8, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 6, "top_domain": "data", "specialization": 1, "strengths": [ "specialist:data" ], "tier": "distinctive" }, { "framework": "google_vertex_rag", "source_id": "google_vertex_rag", "status": "current", "controls": 9, "domains": 1, "depth": 0.63, "distinctiveness": 1.7, "distinct_ratio": 0.19, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 3, "top_domain": "knowledge", "specialization": 1, "strengths": [ "specialist:knowledge" ], "tier": "distinctive" }, { "framework": "salesforce_trust", "source_id": "salesforce_trust", "status": "current", "controls": 18, "domains": 1, "depth": 0.44, "distinctiveness": 1.6, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 2, "top_domain": "agentic", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "cloudflare_resilience", "source_id": "cloudflare_resilience", "status": "current", "controls": 11, "domains": 1, "depth": 0.76, "distinctiveness": 1.6, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 6, "top_domain": "resilience", "specialization": 1, "strengths": [ "specialist:resilience" ], "tier": "distinctive" }, { "framework": "acm_ethics", "source_id": "acm_ethics", "status": "current", "controls": 14, "domains": 1, "depth": 0.47, "distinctiveness": 1.6, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "ethics", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "eu_charter", "source_id": "eu_charter", "status": "current", "controls": 14, "domains": 1, "depth": 0.89, "distinctiveness": 1.6, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 11, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "okta_financial", "source_id": "okta_financial", "status": "current", "controls": 14, "domains": 1, "depth": 0.43, "distinctiveness": 1.5, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "finance", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "pcaob_as_2201", "source_id": "pcaob_as_2201", "status": "current", "controls": 14, "domains": 1, "depth": 0.76, "distinctiveness": 1.4, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 8, "top_domain": "finance", "specialization": 1, "strengths": [ "specialist:finance" ], "tier": "distinctive" }, { "framework": "anthropic_transparency", "source_id": "anthropic_transparency", "status": "current", "controls": 7, "domains": 1, "depth": 0.4, "distinctiveness": 1.4, "distinct_ratio": 0.2, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "knowledge", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "owasp_aisvs_v1", "source_id": "owasp_aisvs_v1", "status": "current", "controls": 15, "domains": 1, "depth": 0.68, "distinctiveness": 1.3, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 3, "top_domain": "model", "specialization": 1, "strengths": [ "specialist:model" ], "tier": "distinctive" }, { "framework": "iso_31000", "source_id": "iso_31000", "status": "current", "controls": 11, "domains": 1, "depth": 0.75, "distinctiveness": 1.3, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 4, "top_domain": "agentic", "specialization": 1, "strengths": [ "specialist:agentic" ], "tier": "distinctive" }, { "framework": "ms_ifc_agents", "source_id": "ms_ifc_agents", "status": "current", "controls": 16, "domains": 3, "depth": 0.66, "distinctiveness": 1.2, "distinct_ratio": 0.07, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 4, "top_domain": "security", "specialization": 0.58, "strengths": [ "specialist:security" ], "tier": "distinctive" }, { "framework": "aws_bedrock_guardrails", "source_id": "aws_bedrock_guardrails", "status": "current", "controls": 15, "domains": 1, "depth": 0.43, "distinctiveness": 1.2, "distinct_ratio": 0.08, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "agentic", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "plot4ai", "source_id": "plot4ai", "status": "current", "controls": 3, "domains": 2, "depth": 0.3, "distinctiveness": 1.2, "distinct_ratio": 0.4, "depth_leader_of": [], "unique_controls": 1, "scarce_controls": 1, "corroborates": 0, "top_domain": "ethics", "specialization": 0.67, "strengths": [ "unique" ], "tier": "distinctive" }, { "framework": "omb_a_123", "source_id": "omb_a_123", "status": "current", "controls": 10, "domains": 1, "depth": 0.56, "distinctiveness": 1.2, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 2, "top_domain": "finance", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "google_dataplex", "source_id": "google_dataplex", "status": "current", "controls": 8, "domains": 1, "depth": 0.65, "distinctiveness": 1.2, "distinct_ratio": 0.16, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "data", "specialization": 1, "strengths": [ "specialist:data" ], "tier": "distinctive" }, { "framework": "owasp_aivss", "source_id": "owasp_aivss", "status": "draft", "controls": 13, "domains": 3, "depth": 0.3, "distinctiveness": 1.1, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "agentic", "specialization": 0.6, "strengths": [], "tier": "light" }, { "framework": "eidas2", "source_id": "eidas2", "status": "current", "controls": 6, "domains": 1, "depth": 0.63, "distinctiveness": 1.1, "distinct_ratio": 0.19, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 2, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity" ], "tier": "distinctive" }, { "framework": "iso_27031", "source_id": "iso_27031", "status": "current", "controls": 9, "domains": 1, "depth": 0.79, "distinctiveness": 1.1, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 5, "top_domain": "resilience", "specialization": 1, "strengths": [ "specialist:resilience" ], "tier": "distinctive" }, { "framework": "un_ethics_ai", "source_id": "un_ethics_ai", "status": "current", "controls": 10, "domains": 1, "depth": 0.66, "distinctiveness": 1.1, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 3, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "snowflake_horizon", "source_id": "snowflake_horizon", "status": "current", "controls": 6, "domains": 1, "depth": 0.5, "distinctiveness": 1.1, "distinct_ratio": 0.18, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "data", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "eu_gpai_cop", "source_id": "eu_gpai_cop", "status": "current", "controls": 7, "domains": 4, "depth": 0.58, "distinctiveness": 1, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 4, "top_domain": "model", "specialization": 0.4, "strengths": [], "tier": "context" }, { "framework": "ietf_agent_operation_authorization", "source_id": "ietf_agent_operation_authorization", "status": "current", "controls": 9, "domains": 3, "depth": 0.47, "distinctiveness": 1, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "identity", "specialization": 0.64, "strengths": [], "tier": "light" }, { "framework": "oecd_cg", "source_id": "oecd_cg", "status": "current", "controls": 7, "domains": 1, "depth": 0.43, "distinctiveness": 1, "distinct_ratio": 0.15, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "authority", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "uk_duaa", "source_id": "uk_duaa", "status": "current", "controls": 6, "domains": 1, "depth": 0.6, "distinctiveness": 1, "distinct_ratio": 0.16, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "privacy", "specialization": 1, "strengths": [ "specialist:privacy" ], "tier": "distinctive" }, { "framework": "microsoft_azure_ai", "source_id": "microsoft_azure_ai", "status": "current", "controls": 5, "domains": 1, "depth": 0.58, "distinctiveness": 1, "distinct_ratio": 0.2, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 2, "top_domain": "knowledge", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "iso_27001", "source_id": "iso_27001", "status": "current", "controls": 8, "domains": 2, "depth": 0.76, "distinctiveness": 0.9, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 4, "top_domain": "compliance", "specialization": 0.84, "strengths": [ "specialist:compliance" ], "tier": "distinctive" }, { "framework": "scim", "source_id": "scim", "status": "current", "controls": 7, "domains": 1, "depth": 0.73, "distinctiveness": 0.9, "distinct_ratio": 0.13, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 3, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity" ], "tier": "distinctive" }, { "framework": "cis_controls_v8", "source_id": "cis_controls_v8", "status": "current", "controls": 5, "domains": 1, "depth": 0.84, "distinctiveness": 0.9, "distinct_ratio": 0.17, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 3, "top_domain": "resilience", "specialization": 1, "strengths": [ "specialist:resilience" ], "tier": "distinctive" }, { "framework": "owasp_nhi_2025", "source_id": "owasp_nhi_2025", "status": "current", "controls": 7, "domains": 2, "depth": 0.74, "distinctiveness": 0.8, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 5, "top_domain": "security", "specialization": 0.51, "strengths": [ "specialist:security" ], "tier": "distinctive" }, { "framework": "google_beyond_zero", "source_id": "google_beyond_zero", "status": "current", "controls": 9, "domains": 4, "depth": 0.3, "distinctiveness": 0.8, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "agentic", "specialization": 0.33, "strengths": [], "tier": "light" }, { "framework": "edpb_opinion_28_2024", "source_id": "edpb_opinion_28_2024", "status": "current", "controls": 6, "domains": 1, "depth": 0.77, "distinctiveness": 0.8, "distinct_ratio": 0.13, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 4, "top_domain": "privacy", "specialization": 1, "strengths": [ "specialist:privacy" ], "tier": "distinctive" }, { "framework": "owasp_state_agentic", "source_id": "owasp_state_agentic", "status": "current", "controls": 8, "domains": 3, "depth": 0.3, "distinctiveness": 0.7, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "agentic", "specialization": 0.75, "strengths": [], "tier": "light" }, { "framework": "aws_lake_formation", "source_id": "aws_lake_formation", "status": "current", "controls": 4, "domains": 1, "depth": 0.6, "distinctiveness": 0.7, "distinct_ratio": 0.17, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "data", "specialization": 1, "strengths": [ "specialist:data" ], "tier": "distinctive" }, { "framework": "eu_gpai_training_template", "source_id": "eu_gpai_training_template", "status": "current", "controls": 5, "domains": 3, "depth": 0.3, "distinctiveness": 0.6, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "model", "specialization": 0.4, "strengths": [], "tier": "light" }, { "framework": "better_bench", "source_id": "better_bench", "status": "current", "controls": 5, "domains": 1, "depth": 0.3, "distinctiveness": 0.6, "distinct_ratio": 0.12, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "model", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "w3c_did", "source_id": "w3c_did", "status": "current", "controls": 3, "domains": 1, "depth": 0.77, "distinctiveness": 0.6, "distinct_ratio": 0.21, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 2, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity" ], "tier": "distinctive" }, { "framework": "dpdp", "source_id": "dpdp", "status": "current", "controls": 4, "domains": 1, "depth": 0.6, "distinctiveness": 0.6, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "privacy", "specialization": 1, "strengths": [ "specialist:privacy" ], "tier": "distinctive" }, { "framework": "uber_adr_agentic_detection", "source_id": "uber_adr_agentic_detection", "status": "current", "controls": 7, "domains": 2, "depth": 0.34, "distinctiveness": 0.5, "distinct_ratio": 0.07, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "security", "specialization": 0.63, "strengths": [], "tier": "light" }, { "framework": "owasp_ml_top10", "source_id": "owasp_ml_top10", "status": "draft", "controls": 4, "domains": 1, "depth": 0.55, "distinctiveness": 0.5, "distinct_ratio": 0.13, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "model", "specialization": 1, "strengths": [], "tier": "context" }, { "framework": "eu_gpai_guidelines", "source_id": "eu_gpai_guidelines", "status": "current", "controls": 3, "domains": 2, "depth": 0.3, "distinctiveness": 0.5, "distinct_ratio": 0.16, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "model", "specialization": 0.6, "strengths": [], "tier": "light" }, { "framework": "openai_sf", "source_id": "openai_sf", "status": "current", "controls": 3, "domains": 1, "depth": 0.3, "distinctiveness": 0.5, "distinct_ratio": 0.16, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "identity", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "wcag_2_2", "source_id": "wcag_2_2", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.5, "distinct_ratio": 0.5, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 5, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "jacobs_wallach_measurement", "source_id": "jacobs_wallach_measurement", "status": "current", "controls": 4, "domains": 2, "depth": 0.38, "distinctiveness": 0.4, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "model", "specialization": 0.6, "strengths": [], "tier": "light" }, { "framework": "nist_genai", "source_id": "nist_genai", "status": "current", "controls": 3, "domains": 1, "depth": 0.3, "distinctiveness": 0.3, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "model", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "nist_aria", "source_id": "nist_aria", "status": "current", "controls": 3, "domains": 1, "depth": 0.3, "distinctiveness": 0.3, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "model", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "eleuther_lm_eval", "source_id": "eleuther_lm_eval", "status": "current", "controls": 3, "domains": 1, "depth": 0.3, "distinctiveness": 0.3, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "model", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "etsi_gr_sai_005", "source_id": "etsi_gr_sai_005", "status": "current", "controls": 2, "domains": 1, "depth": 0.3, "distinctiveness": 0.3, "distinct_ratio": 0.17, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "model", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "cisa_ai_guidance", "source_id": "cisa_ai_guidance", "status": "current", "controls": 3, "domains": 1, "depth": 0.3, "distinctiveness": 0.3, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "agentic", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "openlineage", "source_id": "openlineage", "status": "current", "controls": 2, "domains": 2, "depth": 1, "distinctiveness": 0.3, "distinct_ratio": 0.15, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 2, "top_domain": "knowledge", "specialization": 0.5, "strengths": [ "specialist:knowledge" ], "tier": "distinctive" }, { "framework": "openai_transparency", "source_id": "openai_transparency", "status": "current", "controls": 1, "domains": 1, "depth": 0.6, "distinctiveness": 0.3, "distinct_ratio": 0.25, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "knowledge", "specialization": 1, "strengths": [ "specialist:knowledge" ], "tier": "distinctive" }, { "framework": "ncsc_cisa_secure_ai_2023", "source_id": "ncsc_cisa_secure_ai_2023", "status": "current", "controls": 2, "domains": 1, "depth": 0.45, "distinctiveness": 0.2, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "security", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "mlcommons_ailuminate", "source_id": "mlcommons_ailuminate", "status": "current", "controls": 3, "domains": 1, "depth": 0.4, "distinctiveness": 0.2, "distinct_ratio": 0.07, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "model", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "iso_iec_ts_4213", "source_id": "iso_iec_ts_4213", "status": "current", "controls": 2, "domains": 1, "depth": 0.3, "distinctiveness": 0.2, "distinct_ratio": 0.08, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "model", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "uk_aisi_evals", "source_id": "uk_aisi_evals", "status": "current", "controls": 2, "domains": 1, "depth": 0.3, "distinctiveness": 0.2, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "model", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "oauth_bcp", "source_id": "oauth_bcp", "status": "current", "controls": 2, "domains": 1, "depth": 0.65, "distinctiveness": 0.2, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity" ], "tier": "distinctive" }, { "framework": "eu_data_gov_act", "source_id": "eu_data_gov_act", "status": "current", "controls": 2, "domains": 2, "depth": 0.65, "distinctiveness": 0.2, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "data", "specialization": 0.77, "strengths": [ "specialist:data" ], "tier": "distinctive" }, { "framework": "nis2", "source_id": "nis2", "status": "current", "controls": 1, "domains": 1, "depth": 0.3, "distinctiveness": 0.2, "distinct_ratio": 0.17, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "compliance", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "fedramp_20x", "source_id": "fedramp_20x", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.2, "distinct_ratio": 0.17, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "compliance", "specialization": 1, "strengths": [ "specialist:compliance" ], "tier": "distinctive" }, { "framework": "cfpb_ai", "source_id": "cfpb_ai", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.2, "distinct_ratio": 0.17, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "finance", "specialization": 1, "strengths": [ "specialist:finance" ], "tier": "distinctive" }, { "framework": "eu_accessibility_act", "source_id": "eu_accessibility_act", "status": "current", "controls": 2, "domains": 1, "depth": 0.3, "distinctiveness": 0.2, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "ethics", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "spiffe_spire", "source_id": "spiffe_spire", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity" ], "tier": "distinctive" }, { "framework": "oidc_federation", "source_id": "oidc_federation", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity" ], "tier": "distinctive" }, { "framework": "fapi_2_0", "source_id": "fapi_2_0", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "identity", "specialization": 1, "strengths": [ "specialist:identity" ], "tier": "distinctive" }, { "framework": "opa_rego", "source_id": "opa_rego", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "authority", "specialization": 1, "strengths": [ "specialist:authority" ], "tier": "distinctive" }, { "framework": "lgpd", "source_id": "lgpd", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "privacy", "specialization": 1, "strengths": [ "specialist:privacy" ], "tier": "distinctive" }, { "framework": "pipl", "source_id": "pipl", "status": "current", "controls": 1, "domains": 1, "depth": 0.6, "distinctiveness": 0.1, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "privacy", "specialization": 1, "strengths": [ "specialist:privacy" ], "tier": "distinctive" }, { "framework": "quebec_law25", "source_id": "quebec_law25", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "privacy", "specialization": 1, "strengths": [ "specialist:privacy" ], "tier": "distinctive" }, { "framework": "cnil_ai_guidance_2023", "source_id": "cnil_ai_guidance_2023", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "privacy", "specialization": 1, "strengths": [ "specialist:privacy" ], "tier": "distinctive" }, { "framework": "csa_ai_caiq", "source_id": "csa_ai_caiq", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.06, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "compliance", "specialization": 1, "strengths": [ "specialist:compliance" ], "tier": "distinctive" }, { "framework": "enisa_ai", "source_id": "enisa_ai", "status": "current", "controls": 1, "domains": 1, "depth": 0.3, "distinctiveness": 0.1, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "resilience", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "occ_ai", "source_id": "occ_ai", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "finance", "specialization": 1, "strengths": [ "specialist:finance" ], "tier": "distinctive" }, { "framework": "ffiec", "source_id": "ffiec", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "finance", "specialization": 1, "strengths": [ "specialist:finance" ], "tier": "distinctive" }, { "framework": "finra", "source_id": "finra", "status": "current", "controls": 1, "domains": 1, "depth": 0.6, "distinctiveness": 0.1, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "finance", "specialization": 1, "strengths": [ "specialist:finance" ], "tier": "distinctive" }, { "framework": "sec_ai", "source_id": "sec_ai", "status": "current", "controls": 1, "domains": 1, "depth": 0.3, "distinctiveness": 0.1, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "finance", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "iso_23894", "source_id": "iso_23894", "status": "current", "controls": 1, "domains": 1, "depth": 0.6, "distinctiveness": 0.1, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "colorado_sb24_205", "source_id": "colorado_sb24_205", "status": "current", "controls": 1, "domains": 1, "depth": 0.6, "distinctiveness": 0.1, "distinct_ratio": 0.09, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "eeoc_ai", "source_id": "eeoc_ai", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "doj_ai", "source_id": "doj_ai", "status": "current", "controls": 1, "domains": 1, "depth": 0.6, "distinctiveness": 0.1, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "ftc_ai", "source_id": "ftc_ai", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.13, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "nyc_ll144_2021", "source_id": "nyc_ll144_2021", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "ethics", "specialization": 1, "strengths": [ "specialist:ethics" ], "tier": "distinctive" }, { "framework": "section_508", "source_id": "section_508", "status": "current", "controls": 1, "domains": 1, "depth": 0.3, "distinctiveness": 0.1, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "ethics", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "ada_title_ii_web", "source_id": "ada_title_ii_web", "status": "current", "controls": 1, "domains": 1, "depth": 0.3, "distinctiveness": 0.1, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "ethics", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "aoda_iasr", "source_id": "aoda_iasr", "status": "current", "controls": 1, "domains": 1, "depth": 0.3, "distinctiveness": 0.1, "distinct_ratio": 0.1, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "ethics", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "c2pa", "source_id": "c2pa", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "knowledge", "specialization": 1, "strengths": [ "specialist:knowledge" ], "tier": "distinctive" }, { "framework": "iso_5259", "source_id": "iso_5259", "status": "current", "controls": 1, "domains": 1, "depth": 0.6, "distinctiveness": 0.1, "distinct_ratio": 0.13, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "data", "specialization": 1, "strengths": [ "specialist:data" ], "tier": "distinctive" }, { "framework": "eu_data_act", "source_id": "eu_data_act", "status": "current", "controls": 1, "domains": 1, "depth": 0.3, "distinctiveness": 0.1, "distinct_ratio": 0.11, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 0, "top_domain": "data", "specialization": 1, "strengths": [], "tier": "light" }, { "framework": "data_contract_spec", "source_id": "data_contract_spec", "status": "current", "controls": 1, "domains": 1, "depth": 1, "distinctiveness": 0.1, "distinct_ratio": 0.14, "depth_leader_of": [], "unique_controls": 0, "scarce_controls": 0, "corroborates": 1, "top_domain": "data", "specialization": 1, "strengths": [ "specialist:data" ], "tier": "distinctive" } ], "domains": [ { "slug": "security", "avg_depth": 0.57, "depth_rank": 10, "direct_mappings": 248, "assessed_rows": 777, "unassessed_rows": 0, "strong_source_count": 9, "cross_domain_controls": 17, "super_strengths": [ { "fw": "owasp_aisvs", "score": 57.2, "controls": 69 }, { "fw": "mitre_atlas", "score": 51.4, "controls": 123 }, { "fw": "csa_aismm", "score": 44.8, "controls": 48 } ], "opportunities": [ "thin depth — few sources cover it deeply; a focus area for future sourcing" ] }, { "slug": "model", "avg_depth": 0.57, "depth_rank": 11, "direct_mappings": 86, "assessed_rows": 491, "unassessed_rows": 0, "strong_source_count": 9, "cross_domain_controls": 10, "super_strengths": [ { "fw": "nist_rmf", "score": 37, "controls": 56 }, { "fw": "iso_42001", "score": 35.1, "controls": 55 }, { "fw": "csa_aicm", "score": 32.2, "controls": 41 } ], "opportunities": [ "thin depth — few sources cover it deeply; a focus area for future sourcing" ] }, { "slug": "identity", "avg_depth": 0.71, "depth_rank": 4, "direct_mappings": 149, "assessed_rows": 358, "unassessed_rows": 0, "strong_source_count": 15, "cross_domain_controls": 2, "super_strengths": [ { "fw": "nist_800_63", "score": 30.3, "controls": 39 }, { "fw": "anthropic_zt_agents", "score": 29.4, "controls": 37 }, { "fw": "aws_iam", "score": 24.6, "controls": 38 } ], "opportunities": [ "sparse cross-domain links — federation mapping under-explored" ] }, { "slug": "agentic", "avg_depth": 0.6, "depth_rank": 8, "direct_mappings": 193, "assessed_rows": 604, "unassessed_rows": 0, "strong_source_count": 10, "cross_domain_controls": 1, "super_strengths": [ { "fw": "anthropic_zt_agents", "score": 42, "controls": 52 }, { "fw": "nist_rmf", "score": 38.3, "controls": 47 }, { "fw": "iso_42001", "score": 33, "controls": 43 } ], "opportunities": [ "sparse cross-domain links — federation mapping under-explored" ] }, { "slug": "authority", "avg_depth": 0.56, "depth_rank": 12, "direct_mappings": 40, "assessed_rows": 389, "unassessed_rows": 0, "strong_source_count": 4, "cross_domain_controls": 1, "super_strengths": [ { "fw": "iso_42001", "score": 26.7, "controls": 39 }, { "fw": "iso_37301", "score": 24.8, "controls": 38 }, { "fw": "aws_organizations", "score": 24, "controls": 43 } ], "opportunities": [ "thin depth — few sources cover it deeply; a focus area for future sourcing", "sparse cross-domain links — federation mapping under-explored" ] }, { "slug": "privacy", "avg_depth": 0.6, "depth_rank": 9, "direct_mappings": 99, "assessed_rows": 350, "unassessed_rows": 0, "strong_source_count": 7, "cross_domain_controls": 6, "super_strengths": [ { "fw": "gdpr", "score": 48.5, "controls": 54 }, { "fw": "iso_27701", "score": 22, "controls": 26 }, { "fw": "nist_pf", "score": 18.4, "controls": 32 } ], "opportunities": [ "thin depth — few sources cover it deeply; a focus area for future sourcing" ] }, { "slug": "compliance", "avg_depth": 0.69, "depth_rank": 6, "direct_mappings": 182, "assessed_rows": 476, "unassessed_rows": 0, "strong_source_count": 11, "cross_domain_controls": 0, "super_strengths": [ { "fw": "iso_37301", "score": 43.7, "controls": 47 }, { "fw": "eu_ai_act", "score": 38.9, "controls": 50 }, { "fw": "microsoft_compliance", "score": 35.3, "controls": 46 } ], "opportunities": [ "no cross-domain links authored yet — federation mapping under-explored" ] }, { "slug": "resilience", "avg_depth": 0.78, "depth_rank": 2, "direct_mappings": 202, "assessed_rows": 368, "unassessed_rows": 0, "strong_source_count": 12, "cross_domain_controls": 1, "super_strengths": [ { "fw": "google_sre", "score": 37.1, "controls": 46 }, { "fw": "dora", "score": 36.5, "controls": 47 }, { "fw": "aws_reliability", "score": 34.2, "controls": 42 } ], "opportunities": [ "sparse cross-domain links — federation mapping under-explored" ] }, { "slug": "finance", "avg_depth": 0.68, "depth_rank": 7, "direct_mappings": 128, "assessed_rows": 404, "unassessed_rows": 0, "strong_source_count": 7, "cross_domain_controls": 1, "super_strengths": [ { "fw": "eu_ai_act", "score": 37.3, "controls": 44 }, { "fw": "sr26_2", "score": 35.4, "controls": 37 }, { "fw": "coso_icfr", "score": 29.1, "controls": 35 } ], "opportunities": [ "sparse cross-domain links — federation mapping under-explored" ] }, { "slug": "ethics", "avg_depth": 0.73, "depth_rank": 3, "direct_mappings": 190, "assessed_rows": 433, "unassessed_rows": 0, "strong_source_count": 13, "cross_domain_controls": 1, "super_strengths": [ { "fw": "eu_ai_act", "score": 43.1, "controls": 47 }, { "fw": "nist_rmf", "score": 42, "controls": 44 }, { "fw": "iso_42001", "score": 35.2, "controls": 38 } ], "opportunities": [ "sparse cross-domain links — federation mapping under-explored" ] }, { "slug": "knowledge", "avg_depth": 0.79, "depth_rank": 1, "direct_mappings": 153, "assessed_rows": 251, "unassessed_rows": 0, "strong_source_count": 8, "cross_domain_controls": 1, "super_strengths": [ { "fw": "iso_42001", "score": 41.9, "controls": 46 }, { "fw": "eu_ai_act", "score": 37.6, "controls": 43 }, { "fw": "dama_dmbok", "score": 29.7, "controls": 36 } ], "opportunities": [ "sparse cross-domain links — federation mapping under-explored" ] }, { "slug": "data", "avg_depth": 0.71, "depth_rank": 5, "direct_mappings": 167, "assessed_rows": 346, "unassessed_rows": 0, "strong_source_count": 13, "cross_domain_controls": 1, "super_strengths": [ { "fw": "dama_dmbok", "score": 38.7, "controls": 41 }, { "fw": "eu_ai_act", "score": 28.5, "controls": 32 }, { "fw": "gdpr", "score": 24.5, "controls": 29 } ], "opportunities": [ "sparse cross-domain links — federation mapping under-explored" ] } ], "findings": [ { "id": "value-corroborators", "visibility": "public", "severity": "info", "summary": "strong independent corroborators — authoritative sources that confirm coverage others also provide (assurance value, not redundancy)", "detail": [ "eu_ai_act (194 controls)", "iso_42001 (116 controls)", "nist_rmf (89 controls)", "microsoft_rai (21 controls)", "mitre_atlas (28 controls)", "owasp_ai_exchange (42 controls)", "gdpr (78 controls)", "anthropic_zt_agents (78 controls)", "dama_dmbok (57 controls)", "csa_aicm (22 controls)", "iso_37301 (49 controls)", "google_saif (17 controls)", "cobit_2019 (35 controls)", "aiuc_1 (19 controls)", "owasp_aisvs (53 controls)", "sr26_2 (37 controls)", "nist_pf (20 controls)", "nist_csf (25 controls)", "dora (23 controls)", "okta_iam (13 controls)" ] }, { "id": "value-light", "visibility": "public", "severity": "info", "summary": "light sources — thin and shallow with no standout strength (few controls, mostly adjacent fit)", "detail": [ "anthropic_privacy", "nist_ai_100_2", "openai_privacy", "nvidia_secure_agent_workspace_ra", "salesforce_trust", "acm_ethics", "okta_financial", "anthropic_transparency", "aws_bedrock_guardrails", "owasp_aivss", "ietf_agent_operation_authorization", "oecd_cg", "google_beyond_zero", "owasp_state_agentic", "eu_gpai_training_template", "better_bench", "uber_adr_agentic_detection", "eu_gpai_guidelines", "openai_sf", "jacobs_wallach_measurement", "nist_genai", "nist_aria", "eleuther_lm_eval", "etsi_gr_sai_005", "cisa_ai_guidance", "ncsc_cisa_secure_ai_2023", "mlcommons_ailuminate", "iso_iec_ts_4213", "uk_aisi_evals", "nis2", "eu_accessibility_act", "enisa_ai", "sec_ai", "section_508", "ada_title_ii_web", "aoda_iasr", "eu_data_act" ] }, { "id": "value-thin-domains", "visibility": "internal", "severity": "low", "summary": "domains with the thinnest depth / narrowest source bench (future focus)", "detail": [ "security (depth 0.57, 9 strong)", "model (depth 0.57, 9 strong)", "authority (depth 0.56, 4 strong)", "privacy (depth 0.6, 7 strong)" ] }, { "id": "value-cross-domain-maturity", "visibility": "internal", "severity": "low", "summary": "cross-domain mapping maturity per domain (federation exploration)", "detail": [ "security: 17", "model: 10", "identity: 2", "agentic: 1", "authority: 1", "privacy: 6", "compliance: 0", "resilience: 1", "finance: 1", "ethics: 1", "knowledge: 1", "data: 1" ] } ] }