| ISO/IEC 42001:2023 - AI management system (the certifiable anchor - see the dedicated mapping) |
| A.6.2.6/.8 · A.5 · C.2.8-11 | Evidence layer: operation logs, impact, robustness/transparency/safety → BHS/POI/DRM/SIGTRACK/CPF3 | DIRECT |
| EU AI Act - Regulation (EU) 2024/1689 |
| Art. 12 - Record-keeping | Automatic event logging over lifetime → E1 posture log + E2 SIGTRACK tamper-evident trail | DIRECT |
| Art. 15 - Accuracy, robustness, cybersecurity | Resilience to adversarial inputs → E3 C0/C1/CPI runtime measurement | DIRECT |
| Art. 72 - Post-market monitoring | Continuous documented monitoring → E5 BHS/POI longitudinal + CPF3 forecast | DIRECT |
| Art. 13 - Transparency to deployers | Interpretable operation → E6 named posture codes + named alert reasons | PARTIAL |
| Art. 14 - Human oversight | Enable intervention → E4 DRM/IRS real-time risk surfacing + alert ladder | PARTIAL |
| Art. 9 - Risk management system | Iterative risk evaluation → E4/E5 runtime signals feed the process | PARTIAL |
| Art. 55 - GPAI systemic risk | Model eval, adversarial testing, incident tracking → E3 war-zone probes + E1 incident logging | PARTIAL |
| Art. 10/11/17 - Data governance, technical docs, QMS | Procedural / organizational | OUT |
| NIST AI RMF 1.0 (2023) + Generative AI Profile (NIST-AI-600-1, 2024) |
| MEASURE 2.x - TEVV & monitoring | PSA's home function - E1-E6 across the board | DIRECT |
| MEASURE 2.6 / 2.7 - Safety; security & resilience | E3 adversarial + E4 safety risk | DIRECT |
| MEASURE 2.8 / 2.9 - Transparency, accountability, explainability | E6 posture codes + E2 SIGTRACK | DIRECT |
| MEASURE 2.3 / 2.5 / 2.13 - Eval, validity, ongoing monitoring | E5 BHS/POI/CPF3 | DIRECT |
| MANAGE 4.x - Monitoring & incident response | E5 + alert ladder feed the function | PARTIAL |
| MAP 1-5 - Context establishment | E4 DRM domain targeting (legal/health/finance) | PARTIAL |
| GOVERN | Organizational culture, policy, accountability structures | OUT |
| MEASURE 2.11 - Fairness & bias | Protected attributes never ingested | OUT |
| ISO/IEC 23894:2023 - AI risk management (guidance) |
| Risk identification & analysis | E4 DRM runtime risk + E1 posture evidence | PARTIAL |
| Risk monitoring & review | E5 BHS/POI/CPF3 | PARTIAL |
| Risk treatment & governance integration | Procedural | OUT |
| ISO/IEC 42005 - AI system impact assessment |
| Evidence of actual behavioral impacts | E4 DRM (IRS, RAS) runtime - incl. psychological harm | PARTIAL |
| Documentation & sign-off of the assessment | Procedural | OUT |
| ISO/IEC TR 24028 (trustworthiness) & TR 24027 (bias) |
| TR 24028 - robustness & transparency aspects | E3 adversarial + E6 transparency | PARTIAL |
| TR 24027 - bias in AI systems | Protected attributes never ingested | OUT |
| OECD AI Principles (2019, updated 2024) |
| 1.4 - Robustness, security & safety | E3 C1/C5 + E5 CPF3 | DIRECT |
| 1.3 - Transparency & explainability | E6 posture codes | PARTIAL |
| 1.5 - Accountability | E2 SIGTRACK verifiable trail | PARTIAL |
| 1.2 - Human-centred values & fairness | Bias subset out of scope | OUT |
| Council of Europe - Framework Convention on AI (2024) |
| Documentation, traceability, oversight | E1/E2 + E4 | PARTIAL |
| Rights-based governance, redress | Treaty-level / procedural | OUT |
| US Colorado AI Act - SB 24-205 (effective 2026) |
| Risk-management policy & programme | E5 monitoring evidence | PARTIAL |
| Impact assessment for consequential decisions | E4 behavioral evidence | PARTIAL |
| Duty to avoid algorithmic discrimination | Bias on protected attributes - out of scope | OUT |
| Singapore - Model AI Governance Framework / AI Verify |
| Robustness & behavioral safety testing | E3 C-classifiers + war-zone probes | DIRECT |
| Operations management & monitoring | E5 BHS/CPF3 | PARTIAL |
| AI Verify fairness testing | Bias subset out of scope | OUT |
| MITRE ATLAS - adversarial ML threat knowledge base |
| Prompt injection, jailbreak, evasion at runtime | E3 C0 input intent (I1-I9), C1 adversarial stress, CPI, semantic-drift detection | DIRECT |
| Model/data poisoning, supply-chain, weight exfiltration | Outside the text-behavioral surface | OUT |
| SOC 2 / ISO/IEC 27001 - security & audit controls |
| Audit-log integrity, tamper-evidence, monitoring | E2 SIGTRACK - verifiable without trusting the issuer | PARTIAL |
| Full ISMS (access control, change mgmt, …) | Procedural / infrastructural | OUT |
| Sectoral instruments |
| GDPR Art. 22 - Automated decision-making safeguards | E4 DRM evidence + E6 named reasons | PARTIAL |
| HIPAA - health conversational-AI safety | E4 IRS/DRM crisis detection (safety layer, not a HIPAA control) | PARTIAL |
| SR 11-7 - model risk management (finance) | E5 CPF3 + behavioral drift + benchmark (ongoing monitoring + effective challenge) | PARTIAL |