AI governance controls crosswalk

Every open reference control read from the framework side: for each obligation, clause or id, the controls that map to it; for each profile, its controls with their ids per framework.

By Jorge García Aibar Updated 2026-09-26

What this crosswalk is

The open control profiles map each control to the obligations, standards and threat catalogues it answers. This page turns those mappings around: one table per framework, one row per clause or id, with the controls that map to it. It is generated at build time from the same registry as the profile pages, so it lists 469 mappings of 73 controls across 30 frameworks, and a framework with no mapping has no table. Every id is checked against the site's registers or the framework's public index before it is published.

Each mapping is illustrative, not a claim of conformity. For the frameworks themselves, see the frameworks; for how they overlap topic by topic, see the framework crosswalk.

Frameworks

Obligation register
- EU AI Act (post-Omnibus) (27 ids)
- GPAI Code of Practice (1 id)
- General Data Protection Regulation (EU) 2016/679 (9 ids)
- Directive (EU) 2019/790 on copyright in the Digital Single Market (1 id)
- ISO/IEC 42001 (5 ids)
- NIST AI RMF (4 ids)
- NIST AI Agent Standards Initiative (1 id)
- NIST AI 600-1 Generative AI Profile (1 id)
- CSA AI Controls Matrix (AICM) v1.1 (2 ids)
- OWASP Top 10 for Agentic Applications 2026 (1 id)
- OWASP Top 10 for LLM Applications 2026 (1 id)
- OWASP Agent Control Standard (ACS) (1 id)
- OWASP AIBOM (1 id)
- Singapore Model AI Governance Framework for Agentic AI (2 ids)
- TC260 AI Safety Governance Framework 3.0 (1 id)
- ETSI EN 304 223 (1 id)
ISO/IEC 42001:2023 Annex A (13 ids)
NIST AI Risk Management Framework (AI RMF 1.0) (25 ids)
OWASP Top 10 for LLM Applications 2026 (6 ids)
OWASP Top 10 for Agentic Applications 2026 (10 ids)
MITRE ATLAS techniques (7 ids)
NIST SP 800-53 Rev. 5 (8 ids)
AIUC-1 (10 ids)
EU AI Act (1 id)
IETF RFC 8693 (1 id)
ISO/IEC 42001:2023 (2 ids)
MCP specification 2026-07-28 (1 id)
MITRE ATLAS mitigation (10 ids)
NIST SP 800-218A (2 ids)
SPIFFE (1 id)

Obligation register

Rows of the site's obligation register (ids AIGE-OBL-*), grouped by the instrument each belongs to. Each id links to its register page, which names the requirement, the evidence it asks for and the source.

EU AI Act (post-Omnibus)

Rows of this site's obligation register (AIGE-OBL-*) for EU AI Act; each links to its register page. 27 ids, 110 mappings. Source.

The controls mapped to each clause or id of EU AI Act (post-Omnibus)
Clause or id	Controls
AIGE-OBL-EUAIA-ART4 EU AI Act Art. 4 AI literacy	AIGE-CTL-DEPLOY-003 Oversight by trained people with authority to stop AIGE-CTL-DEPLOY-014 Sanctioned AI gateway for staff use
AIGE-OBL-EUAIA-ART4A EU AI Act Art. 4a lawful basis for special-category data in bias detection	AIGE-CTL-DATA-007 Special-Category Data Conditions AIGE-CTL-DEPLOY-009 Fairness monitored by group in production
AIGE-OBL-EUAIA-ART5 EU AI Act Art. 5 prohibited practices (incl. new NCII and CSAM bans)	AIGE-CTL-DEPLOY-012 Deactivation triggers, degraded modes and suspension
AIGE-OBL-EUAIA-ART9 EU AI Act Art. 9 risk management system	AIGE-CTL-EVAL-009 Evaluation Validity Checks AIGE-CTL-DATA-012 Registered Downstream Consumers of Outputs AIGE-CTL-ASSURE-001 Test Plan Frozen Before Evaluation AIGE-CTL-ASSURE-003 Signed Test Report Against the Plan AIGE-CTL-DEPLOY-008 Monitoring plan with thresholds, owners and consequences
AIGE-OBL-EUAIA-ART10 EU AI Act Art. 10 data and data governance	AIGE-CTL-DATA-001 Dataset Admission Gate at Read Time AIGE-CTL-DATA-002 Dataset Card for Every Admitted Version AIGE-CTL-DATA-003 Training-Data Rights Ledger Row per Source AIGE-CTL-DATA-008 Fitness-for-Purpose Checks Before Admission AIGE-CTL-DATA-009 Signed Snapshot Integrity AIGE-CTL-DATA-010 Lineage from Training Runs to Admitted Sources
AIGE-OBL-EUAIA-ART11 EU AI Act Art. 11 technical documentation (Annex IV)	AIGE-CTL-ASSURE-003 Signed Test Report Against the Plan AIGE-CTL-ASSURE-012 AI Bill of Materials per Build
AIGE-OBL-EUAIA-ART12 EU AI Act Art. 12 record-keeping and logging	AIGE-CTL-EVAL-005 Monitoring Integrity AIGE-CTL-EVAL-007 Incident Evidence Preservation AIGE-CTL-AGENT-023 Memory write gate and rollback AIGE-CTL-ASSURE-004 Common Signed Evidence Record AIGE-CTL-ASSURE-006 Control Observations Filed Against Control Ids AIGE-CTL-ASSURE-007 Machine-Readable Evidence in OSCAL AIGE-CTL-ASSURE-008 Evidence Retention as Code
AIGE-OBL-EUAIA-ART13 EU AI Act Art. 13 transparency and information to deployers	AIGE-CTL-AGENT-009 Approval log, bound to the call AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed AIGE-CTL-DEPLOY-002 Instructions for use held and followed
AIGE-OBL-EUAIA-ART14 EU AI Act Art. 14 human oversight	AIGE-CTL-EVAL-001 Authorization Boundary AIGE-CTL-EVAL-004 Tool and Action Mediation AIGE-CTL-EVAL-006 Stop Conditions AIGE-CTL-AGENT-001 Registry entry AIGE-CTL-AGENT-005 Tool allow-list, deny by default AIGE-CTL-AGENT-007 Runtime guardrail on every tool call AIGE-CTL-AGENT-009 Approval log, bound to the call AIGE-CTL-AGENT-010 Per-agent circuit breaker AIGE-CTL-AGENT-011 Drilled kill switch AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed AIGE-CTL-AGENT-017 Output and egress filter AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-DEPLOY-003 Oversight by trained people with authority to stop
AIGE-OBL-EUAIA-ART15 EU AI Act Art. 15 accuracy, robustness and cybersecurity	AIGE-CTL-EVAL-002 Network Egress Control AIGE-CTL-EVAL-003 Credential Isolation AIGE-CTL-EVAL-008 Harness and Configuration Attestation AIGE-CTL-EVAL-009 Evaluation Validity Checks AIGE-CTL-AGENT-002 Its own identity AIGE-CTL-AGENT-005 Tool allow-list, deny by default AIGE-CTL-AGENT-007 Runtime guardrail on every tool call AIGE-CTL-AGENT-008 Execution budgets AIGE-CTL-AGENT-010 Per-agent circuit breaker AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed AIGE-CTL-AGENT-016 Code runs only in a sandbox AIGE-CTL-AGENT-017 Output and egress filter AIGE-CTL-AGENT-018 MCP server admission gate AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-AGENT-020 MCP authorisation (spec 2026-07-28) AIGE-CTL-AGENT-021 Replace long-lived secrets with short-lived credentials AIGE-CTL-AGENT-022 Delegation, never impersonation AIGE-CTL-AGENT-023 Memory write gate and rollback AIGE-CTL-AGENT-025 Accountability across hops AIGE-CTL-AGENT-026 Stopping third-party agents at your boundary AIGE-CTL-ASSURE-002 Release Blocked Below the Eval Threshold AIGE-CTL-ASSURE-006 Control Observations Filed Against Control Ids AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load AIGE-CTL-ASSURE-011 Safe Model Formats and Digest-Pinned Third-Party Models
AIGE-OBL-EUAIA-ART15-4 EU AI Act Art. 15(4) feedback loops in systems that continue to learn	AIGE-CTL-DEPLOY-009 Fairness monitored by group in production
AIGE-OBL-EUAIA-ART17 EU AI Act Art. 17 quality management system	AIGE-CTL-ASSURE-004 Common Signed Evidence Record AIGE-CTL-ASSURE-006 Control Observations Filed Against Control Ids AIGE-CTL-ASSURE-007 Machine-Readable Evidence in OSCAL
AIGE-OBL-EUAIA-ART18 EU AI Act Art. 18 documentation keeping	AIGE-CTL-ASSURE-008 Evidence Retention as Code
AIGE-OBL-EUAIA-ART19 EU AI Act Art. 19 automatically generated logs kept by the provider	AIGE-CTL-ASSURE-008 Evidence Retention as Code
AIGE-OBL-EUAIA-ART20 EU AI Act Art. 20 corrective actions and duty of information	AIGE-CTL-DEPLOY-012 Deactivation triggers, degraded modes and suspension
AIGE-OBL-EUAIA-ART25 EU AI Act Art. 25 responsibilities along the AI value chain	AIGE-CTL-AGENT-018 MCP server admission gate AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-DATA-012 Registered Downstream Consumers of Outputs AIGE-CTL-DEPLOY-007 Re-assessment when a change goes beyond what was foreseen
AIGE-OBL-EUAIA-ART26 EU AI Act Art. 26 deployer obligations for high-risk systems	AIGE-CTL-AGENT-001 Registry entry AIGE-CTL-AGENT-010 Per-agent circuit breaker AIGE-CTL-AGENT-011 Drilled kill switch AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-DEPLOY-001 Deployment decision record before use AIGE-CTL-DEPLOY-002 Instructions for use held and followed
AIGE-OBL-EUAIA-ART26-2 EU AI Act Art. 26(2) human oversight assigned to persons with competence, training and authority	AIGE-CTL-DEPLOY-003 Oversight by trained people with authority to stop
AIGE-OBL-EUAIA-ART26-5 EU AI Act Art. 26(5) deployer monitoring, suspension and informing the provider	AIGE-CTL-DEPLOY-005 Staged rollout with pre-registered rollback criteria AIGE-CTL-DEPLOY-008 Monitoring plan with thresholds, owners and consequences AIGE-CTL-DEPLOY-011 Serious incident reporting clocks AIGE-CTL-DEPLOY-012 Deactivation triggers, degraded modes and suspension
AIGE-OBL-EUAIA-ART26-6 EU AI Act Art. 26(6) deployer retention of automatically generated logs	AIGE-CTL-EVAL-007 Incident Evidence Preservation AIGE-CTL-DEPLOY-010 Deployer log retention
AIGE-OBL-EUAIA-ART49-71 EU AI Act Art. 49/71 registration of high-risk systems in the EU database	AIGE-CTL-DEPLOY-013 Shadow AI discovery and registry reconciliation
AIGE-OBL-EUAIA-ART50 EU AI Act Art. 50 transparency for certain AI systems	AIGE-CTL-AGENT-009 Approval log, bound to the call AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed AIGE-CTL-DATA-012 Registered Downstream Consumers of Outputs
AIGE-OBL-EUAIA-ART53 EU AI Act Art. 53 GPAI provider obligations	AIGE-CTL-ASSURE-012 AI Bill of Materials per Build
AIGE-OBL-EUAIA-ART53-1C EU AI Act Art. 53(1)(c) copyright policy honouring text-and-data-mining reservations	AIGE-CTL-DATA-003 Training-Data Rights Ledger Row per Source
AIGE-OBL-EUAIA-ART55 EU AI Act Art. 55 GPAI models with systemic risk	AIGE-CTL-EVAL-009 Evaluation Validity Checks AIGE-CTL-ASSURE-002 Release Blocked Below the Eval Threshold AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load
AIGE-OBL-EUAIA-ART72 EU AI Act Art. 72 post-market monitoring	AIGE-CTL-AGENT-001 Registry entry AIGE-CTL-AGENT-008 Execution budgets AIGE-CTL-AGENT-010 Per-agent circuit breaker AIGE-CTL-AGENT-011 Drilled kill switch AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-AGENT-025 Accountability across hops AIGE-CTL-ASSURE-004 Common Signed Evidence Record AIGE-CTL-ASSURE-005 Live Control Status from the Assurance Store AIGE-CTL-ASSURE-007 Machine-Readable Evidence in OSCAL AIGE-CTL-DEPLOY-008 Monitoring plan with thresholds, owners and consequences
AIGE-OBL-EUAIA-ART73 EU AI Act Art. 73 serious-incident reporting	AIGE-CTL-EVAL-007 Incident Evidence Preservation AIGE-CTL-DEPLOY-011 Serious incident reporting clocks

GPAI Code of Practice

Rows of this site's obligation register (AIGE-OBL-*) for GPAI Code; each links to its register page. 1 id, 1 mapping. Source.

The controls mapped to each clause or id of GPAI Code of Practice
Clause or id	Controls
AIGE-OBL-GPAICOP-SAFETY-C9 Safety and Security Commitment 9: serious-incident reporting	AIGE-CTL-EVAL-007 Incident Evidence Preservation

Rows of this site's obligation register (AIGE-OBL-*) for GDPR; each links to its register page. 9 ids, 11 mappings. Source.

The controls mapped to each clause or id of General Data Protection Regulation (EU) 2016/679
Clause or id	Controls
AIGE-OBL-GDPR-ART5-1B GDPR Art. 5(1)(b) and 6(4) purpose limitation	AIGE-CTL-DATA-001 Dataset Admission Gate at Read Time AIGE-CTL-DATA-003 Training-Data Rights Ledger Row per Source AIGE-CTL-DATA-005 Purpose Match Before Reuse of Data
AIGE-OBL-GDPR-ART6 GDPR Art. 6 lawful basis per processing moment	AIGE-CTL-DATA-004 Lawful Basis and Assessment per Processing Stage
AIGE-OBL-GDPR-ART7 GDPR Art. 7 conditions for consent and its withdrawal	AIGE-CTL-DATA-011 Rights Changes Propagated to Affected Models
AIGE-OBL-GDPR-ART9 GDPR Art. 9 special categories, incl. inferred sensitive data	AIGE-CTL-DATA-007 Special-Category Data Conditions
AIGE-OBL-GDPR-ART15-17-21 GDPR Arts. 15–17 and 21 data subject rights against trained models	AIGE-CTL-DATA-011 Rights Changes Propagated to Affected Models
AIGE-OBL-GDPR-ART25 GDPR Art. 5(1)(c) and 25 minimisation and data protection by design and by default	AIGE-CTL-DATA-006 Personal Data Screening and Minimisation
AIGE-OBL-GDPR-ART30 GDPR Art. 30 records of processing activities	AIGE-CTL-DATA-007 Special-Category Data Conditions
AIGE-OBL-GDPR-ART33-34 GDPR Arts. 33–34 personal data breach notification	AIGE-CTL-DEPLOY-011 Serious incident reporting clocks
AIGE-OBL-GDPR-ART35-36 GDPR Arts. 35–36 DPIA and prior consultation	AIGE-CTL-DATA-004 Lawful Basis and Assessment per Processing Stage

Directive (EU) 2019/790 on copyright in the Digital Single Market

Rows of this site's obligation register (AIGE-OBL-*) for DSM Directive; each links to its register page. 1 id, 2 mappings. Source.

The controls mapped to each clause or id of Directive (EU) 2019/790 on copyright in the Digital Single Market
Clause or id	Controls
AIGE-OBL-DSM-ART4-3 DSM Directive Art. 4(3) text-and-data-mining reservations	AIGE-CTL-DATA-003 Training-Data Rights Ledger Row per Source AIGE-CTL-DATA-011 Rights Changes Propagated to Affected Models

ISO/IEC 42001

Rows of this site's obligation register (AIGE-OBL-*) for ISO 42001; each links to its register page. 5 ids, 16 mappings.

The controls mapped to each clause or id of ISO/IEC 42001
Clause or id	Controls
AIGE-OBL-ISO42001-A6 A.6 AI system life cycle	AIGE-CTL-EVAL-008 Harness and Configuration Attestation AIGE-CTL-EVAL-009 Evaluation Validity Checks AIGE-CTL-ASSURE-001 Test Plan Frozen Before Evaluation AIGE-CTL-ASSURE-003 Signed Test Report Against the Plan AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load
AIGE-OBL-ISO42001-A7 A.7 Data for AI systems	AIGE-CTL-DATA-001 Dataset Admission Gate at Read Time AIGE-CTL-DATA-002 Dataset Card for Every Admitted Version AIGE-CTL-DATA-008 Fitness-for-Purpose Checks Before Admission AIGE-CTL-DATA-010 Lineage from Training Runs to Admitted Sources
AIGE-OBL-ISO42001-A8 A.8 Information for interested parties	AIGE-CTL-EVAL-007 Incident Evidence Preservation AIGE-CTL-DATA-012 Registered Downstream Consumers of Outputs
AIGE-OBL-ISO42001-A9 A.9 Use of AI systems	AIGE-CTL-DATA-012 Registered Downstream Consumers of Outputs
AIGE-OBL-ISO42001-A10 A.10 Third-party and customer relationships	AIGE-CTL-AGENT-018 MCP server admission gate AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load AIGE-CTL-ASSURE-011 Safe Model Formats and Digest-Pinned Third-Party Models

NIST AI RMF

Rows of this site's obligation register (AIGE-OBL-*) for NIST AI RMF; each links to its register page. 4 ids, 16 mappings. Source.

The controls mapped to each clause or id of NIST AI RMF
Clause or id	Controls
AIGE-OBL-NISTRMF-GOVERN GOVERN	AIGE-CTL-ASSURE-005 Live Control Status from the Assurance Store AIGE-CTL-ASSURE-007 Machine-Readable Evidence in OSCAL
AIGE-OBL-NISTRMF-MANAGE MANAGE	AIGE-CTL-EVAL-006 Stop Conditions AIGE-CTL-AGENT-008 Execution budgets AIGE-CTL-AGENT-010 Per-agent circuit breaker AIGE-CTL-AGENT-025 Accountability across hops AIGE-CTL-ASSURE-004 Common Signed Evidence Record AIGE-CTL-ASSURE-005 Live Control Status from the Assurance Store AIGE-CTL-ASSURE-007 Machine-Readable Evidence in OSCAL AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load
AIGE-OBL-NISTRMF-MAP MAP	AIGE-CTL-ASSURE-012 AI Bill of Materials per Build
AIGE-OBL-NISTRMF-MEASURE MEASURE	AIGE-CTL-EVAL-005 Monitoring Integrity AIGE-CTL-EVAL-009 Evaluation Validity Checks AIGE-CTL-ASSURE-001 Test Plan Frozen Before Evaluation AIGE-CTL-ASSURE-002 Release Blocked Below the Eval Threshold AIGE-CTL-ASSURE-003 Signed Test Report Against the Plan

NIST AI Agent Standards Initiative

Rows of this site's obligation register (AIGE-OBL-*) for NIST Agents; each links to its register page. 1 id, 8 mappings. Source.

The controls mapped to each clause or id of NIST AI Agent Standards Initiative
Clause or id	Controls
AIGE-OBL-NIST-AGENTS NIST AI Agent Standards Initiative (2026)	AIGE-CTL-EVAL-003 Credential Isolation AIGE-CTL-AGENT-002 Its own identity AIGE-CTL-AGENT-007 Runtime guardrail on every tool call AIGE-CTL-AGENT-020 MCP authorisation (spec 2026-07-28) AIGE-CTL-AGENT-021 Replace long-lived secrets with short-lived credentials AIGE-CTL-AGENT-022 Delegation, never impersonation AIGE-CTL-AGENT-025 Accountability across hops AIGE-CTL-AGENT-026 Stopping third-party agents at your boundary

NIST AI 600-1 Generative AI Profile

Rows of this site's obligation register (AIGE-OBL-*) for NIST AI 600-1; each links to its register page. 1 id, 1 mapping. Source.

The controls mapped to each clause or id of NIST AI 600-1 Generative AI Profile
Clause or id	Controls
AIGE-OBL-NIST-AI600-1 NIST AI 600-1 Generative AI Profile	AIGE-CTL-EVAL-009 Evaluation Validity Checks

CSA AI Controls Matrix (AICM) v1.1

Rows of this site's obligation register (AIGE-OBL-*) for CSA AICM; each links to its register page. 2 ids, 13 mappings. Source.

The controls mapped to each clause or id of CSA AI Controls Matrix (AICM) v1.1
Clause or id	Controls
AIGE-OBL-CSA-AICM AICM v1.1: 247 control objectives across 18 domains	AIGE-CTL-ASSURE-005 Live Control Status from the Assurance Store AIGE-CTL-ASSURE-012 AI Bill of Materials per Build
AIGE-OBL-CSA-AICM-AGENTIC AICM agent controls with the CSA Agentic Trust Framework and AARM specification	AIGE-CTL-EVAL-001 Authorization Boundary AIGE-CTL-AGENT-002 Its own identity AIGE-CTL-AGENT-005 Tool allow-list, deny by default AIGE-CTL-AGENT-007 Runtime guardrail on every tool call AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed AIGE-CTL-AGENT-017 Output and egress filter AIGE-CTL-AGENT-020 MCP authorisation (spec 2026-07-28) AIGE-CTL-AGENT-021 Replace long-lived secrets with short-lived credentials AIGE-CTL-AGENT-022 Delegation, never impersonation AIGE-CTL-AGENT-025 Accountability across hops AIGE-CTL-AGENT-026 Stopping third-party agents at your boundary

OWASP Top 10 for Agentic Applications 2026

Rows of this site's obligation register (AIGE-OBL-*) for OWASP Agentic; each links to its register page. 1 id, 25 mappings. Source.

The controls mapped to each clause or id of OWASP Top 10 for Agentic Applications 2026
Clause or id	Controls
AIGE-OBL-OWASP-AGENTIC Top 10 for Agentic Applications 2026	AIGE-CTL-EVAL-001 Authorization Boundary AIGE-CTL-EVAL-002 Network Egress Control AIGE-CTL-EVAL-003 Credential Isolation AIGE-CTL-EVAL-004 Tool and Action Mediation AIGE-CTL-EVAL-006 Stop Conditions AIGE-CTL-AGENT-001 Registry entry AIGE-CTL-AGENT-002 Its own identity AIGE-CTL-AGENT-005 Tool allow-list, deny by default AIGE-CTL-AGENT-007 Runtime guardrail on every tool call AIGE-CTL-AGENT-008 Execution budgets AIGE-CTL-AGENT-009 Approval log, bound to the call AIGE-CTL-AGENT-010 Per-agent circuit breaker AIGE-CTL-AGENT-011 Drilled kill switch AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed AIGE-CTL-AGENT-016 Code runs only in a sandbox AIGE-CTL-AGENT-017 Output and egress filter AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-AGENT-020 MCP authorisation (spec 2026-07-28) AIGE-CTL-AGENT-021 Replace long-lived secrets with short-lived credentials AIGE-CTL-AGENT-022 Delegation, never impersonation AIGE-CTL-AGENT-023 Memory write gate and rollback AIGE-CTL-AGENT-025 Accountability across hops AIGE-CTL-AGENT-026 Stopping third-party agents at your boundary AIGE-CTL-ASSURE-002 Release Blocked Below the Eval Threshold AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load

OWASP Top 10 for LLM Applications 2026

Rows of this site's obligation register (AIGE-OBL-*) for OWASP LLM; each links to its register page. 1 id, 4 mappings. Source.

The controls mapped to each clause or id of OWASP Top 10 for LLM Applications 2026
Clause or id	Controls
AIGE-OBL-OWASP-LLM Top 10 for LLM Applications 2026	AIGE-CTL-EVAL-002 Network Egress Control AIGE-CTL-DATA-009 Signed Snapshot Integrity AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load AIGE-CTL-ASSURE-011 Safe Model Formats and Digest-Pinned Third-Party Models

OWASP Agent Control Standard (ACS)

Rows of this site's obligation register (AIGE-OBL-*) for OWASP ACS; each links to its register page. 1 id, 1 mapping. Source.

The controls mapped to each clause or id of OWASP Agent Control Standard (ACS)
Clause or id	Controls
AIGE-OBL-OWASP-ACS Agent Control Standard (ACS)	AIGE-CTL-EVAL-004 Tool and Action Mediation

OWASP AIBOM

Rows of this site's obligation register (AIGE-OBL-*) for OWASP AIBOM; each links to its register page. 1 id, 4 mappings. Source.

The controls mapped to each clause or id of OWASP AIBOM
Clause or id	Controls
AIGE-OBL-OWASP-AIBOM AIBOM	AIGE-CTL-EVAL-008 Harness and Configuration Attestation AIGE-CTL-AGENT-018 MCP server admission gate AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-ASSURE-012 AI Bill of Materials per Build

Singapore Model AI Governance Framework for Agentic AI

Rows of this site's obligation register (AIGE-OBL-*) for Singapore Agentic; each links to its register page. 2 ids, 3 mappings. Source.

The controls mapped to each clause or id of Singapore Model AI Governance Framework for Agentic AI
Clause or id	Controls
AIGE-OBL-SG-AGENTIC-CHECKPOINTS Singapore IMDA Model AI Governance Framework for Agentic AI: human checkpoints for significant actions (voluntary)	AIGE-CTL-EVAL-004 Tool and Action Mediation
AIGE-OBL-SG-AGENTIC-IDENTITY Singapore IMDA Model AI Governance Framework for Agentic AI: agent identity and scoped authorisations (voluntary)	AIGE-CTL-EVAL-001 Authorization Boundary AIGE-CTL-EVAL-003 Credential Isolation

TC260 AI Safety Governance Framework 3.0

Rows of this site's obligation register (AIGE-OBL-*) for TC260 Framework 3.0; each links to its register page. 1 id, 1 mapping. Source.

The controls mapped to each clause or id of TC260 AI Safety Governance Framework 3.0
Clause or id	Controls
AIGE-OBL-CN-TC260-AGENTS TC260 Framework 3.0 Appendix 2: agentic AI risk management (voluntary; 2026-09-14)	AIGE-CTL-EVAL-006 Stop Conditions

ETSI EN 304 223

Rows of this site's obligation register (AIGE-OBL-*) for ETSI EN 304 223; each links to its register page. 1 id, 1 mapping. Source.

The controls mapped to each clause or id of ETSI EN 304 223
Clause or id	Controls
AIGE-OBL-ETSI-304223 ETSI EN 304 223 baseline cyber-security for AI models and systems	AIGE-CTL-AGENT-016 Code runs only in a sandbox

ISO/IEC 42001:2023 Annex A

Annex A reference controls, by their short titles. 13 ids, 83 mappings. Source.

The controls mapped to each clause or id of ISO/IEC 42001:2023 Annex A
Clause or id	Controls
A.6.2.2 AI system requirements and specification	AIGE-CTL-EVAL-001 Authorization Boundary
A.6.2.4 AI system verification and validation	AIGE-CTL-EVAL-008 Harness and Configuration Attestation AIGE-CTL-EVAL-009 Evaluation Validity Checks AIGE-CTL-AGENT-007 Runtime guardrail on every tool call AIGE-CTL-ASSURE-001 Test Plan Frozen Before Evaluation AIGE-CTL-ASSURE-002 Release Blocked Below the Eval Threshold AIGE-CTL-ASSURE-003 Signed Test Report Against the Plan
A.6.2.5 AI system deployment	AIGE-CTL-AGENT-002 Its own identity AIGE-CTL-AGENT-016 Code runs only in a sandbox AIGE-CTL-AGENT-020 MCP authorisation (spec 2026-07-28) AIGE-CTL-AGENT-021 Replace long-lived secrets with short-lived credentials AIGE-CTL-AGENT-022 Delegation, never impersonation AIGE-CTL-AGENT-025 Accountability across hops AIGE-CTL-AGENT-026 Stopping third-party agents at your boundary AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load AIGE-CTL-DEPLOY-001 Deployment decision record before use AIGE-CTL-DEPLOY-004 Go-live decision with conditions as code AIGE-CTL-DEPLOY-005 Staged rollout with pre-registered rollback criteria AIGE-CTL-DEPLOY-006 Pinned versions and a tested path back
A.6.2.6 AI system operation and monitoring	AIGE-CTL-EVAL-002 Network Egress Control AIGE-CTL-EVAL-003 Credential Isolation AIGE-CTL-EVAL-005 Monitoring Integrity AIGE-CTL-EVAL-006 Stop Conditions AIGE-CTL-AGENT-001 Registry entry AIGE-CTL-AGENT-005 Tool allow-list, deny by default AIGE-CTL-AGENT-007 Runtime guardrail on every tool call AIGE-CTL-AGENT-008 Execution budgets AIGE-CTL-AGENT-010 Per-agent circuit breaker AIGE-CTL-AGENT-011 Drilled kill switch AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed AIGE-CTL-AGENT-016 Code runs only in a sandbox AIGE-CTL-AGENT-017 Output and egress filter AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-AGENT-023 Memory write gate and rollback AIGE-CTL-AGENT-025 Accountability across hops AIGE-CTL-DEPLOY-005 Staged rollout with pre-registered rollback criteria AIGE-CTL-DEPLOY-008 Monitoring plan with thresholds, owners and consequences AIGE-CTL-DEPLOY-009 Fairness monitored by group in production AIGE-CTL-DEPLOY-012 Deactivation triggers, degraded modes and suspension
A.6.2.8 AI system recording of event logs	AIGE-CTL-EVAL-005 Monitoring Integrity AIGE-CTL-EVAL-007 Incident Evidence Preservation AIGE-CTL-AGENT-001 Registry entry AIGE-CTL-AGENT-010 Per-agent circuit breaker AIGE-CTL-AGENT-011 Drilled kill switch AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-AGENT-023 Memory write gate and rollback AIGE-CTL-DEPLOY-010 Deployer log retention
A.7.2 Data for development and enhancement of AI system	AIGE-CTL-DATA-001 Dataset Admission Gate at Read Time AIGE-CTL-DATA-002 Dataset Card for Every Admitted Version
A.7.4 Quality of data for AI systems	AIGE-CTL-DATA-001 Dataset Admission Gate at Read Time AIGE-CTL-DATA-008 Fitness-for-Purpose Checks Before Admission
A.7.5 Data provenance	AIGE-CTL-AGENT-018 MCP server admission gate AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-DATA-001 Dataset Admission Gate at Read Time AIGE-CTL-DATA-002 Dataset Card for Every Admitted Version AIGE-CTL-DATA-003 Training-Data Rights Ledger Row per Source AIGE-CTL-DATA-009 Signed Snapshot Integrity AIGE-CTL-DATA-010 Lineage from Training Runs to Admitted Sources AIGE-CTL-ASSURE-012 AI Bill of Materials per Build
A.8.2 System documentation and information for users	AIGE-CTL-AGENT-009 Approval log, bound to the call AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed AIGE-CTL-DATA-012 Registered Downstream Consumers of Outputs AIGE-CTL-DEPLOY-002 Instructions for use held and followed
A.8.4 Communication of incidents	AIGE-CTL-EVAL-007 Incident Evidence Preservation AIGE-CTL-DEPLOY-011 Serious incident reporting clocks
A.9.2 Processes for responsible use of AI systems	AIGE-CTL-EVAL-001 Authorization Boundary AIGE-CTL-EVAL-003 Credential Isolation AIGE-CTL-EVAL-004 Tool and Action Mediation AIGE-CTL-AGENT-005 Tool allow-list, deny by default AIGE-CTL-AGENT-007 Runtime guardrail on every tool call AIGE-CTL-AGENT-009 Approval log, bound to the call AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed AIGE-CTL-AGENT-017 Output and egress filter AIGE-CTL-DEPLOY-003 Oversight by trained people with authority to stop AIGE-CTL-DEPLOY-014 Sanctioned AI gateway for staff use
A.9.4 Intended use of the AI system	AIGE-CTL-DATA-012 Registered Downstream Consumers of Outputs AIGE-CTL-DEPLOY-001 Deployment decision record before use
A.10.3 Suppliers	AIGE-CTL-AGENT-018 MCP server admission gate AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load AIGE-CTL-ASSURE-011 Safe Model Formats and Digest-Pinned Third-Party Models AIGE-CTL-ASSURE-012 AI Bill of Materials per Build AIGE-CTL-DEPLOY-014 Sanctioned AI gateway for staff use

NIST AI Risk Management Framework (AI RMF 1.0)

Subcategories, with their text as NIST AI 100-1 prints it. 25 ids, 48 mappings. Source.

The controls mapped to each clause or id of NIST AI Risk Management Framework (AI RMF 1.0)
Clause or id	Controls
GOVERN 1.6 Mechanisms are in place to inventory AI systems and are resourced according to organizational risk priorities.	AIGE-CTL-DEPLOY-013 Shadow AI discovery and registry reconciliation
GOVERN 1.7 Processes and procedures are in place for decommissioning and phasing out AI systems safely and in a manner that does not increase risks or decrease the organization’s trustworthiness.	AIGE-CTL-DEPLOY-015 Retirement runbook with access and data removal
GOVERN 2.2 The organization’s personnel and partners receive AI risk management training to enable them to perform their duties and responsibilities consistent with related policies, procedures, and agreements.	AIGE-CTL-DEPLOY-014 Sanctioned AI gateway for staff use
GOVERN 6.1 Policies and procedures are in place that address AI risks associated with third-party entities, including risks of infringement of a third-party’s intellectual property or other rights.	AIGE-CTL-DATA-003 Training-Data Rights Ledger Row per Source AIGE-CTL-DEPLOY-014 Sanctioned AI gateway for staff use
MAP 1.1 Intended purposes, potentially beneficial uses, context-specific laws, norms and expectations, and prospective settings in which the AI system will be deployed are understood and documented. Considerations include: the specific set or types of users along with their expectations; potential positive and negative impacts of system uses to individuals, communities, organizations, society, and the planet; assumptions and related limitations about AI system purposes, uses, and risks across the development or product AI lifecycle; and related TEVV and system metrics.	AIGE-CTL-DATA-012 Registered Downstream Consumers of Outputs AIGE-CTL-DEPLOY-001 Deployment decision record before use
MAP 2.3 Scientific integrity and TEVV considerations are identified and documented, including those related to experimental design, data collection and selection (e.g., availability, representativeness, suitability), system trustworthiness, and construct validation.	AIGE-CTL-DATA-001 Dataset Admission Gate at Read Time AIGE-CTL-DATA-002 Dataset Card for Every Admitted Version AIGE-CTL-DATA-008 Fitness-for-Purpose Checks Before Admission
MAP 3.3 Targeted application scope is specified and documented based on the system’s capability, established context, and AI system categorization.	AIGE-CTL-DATA-012 Registered Downstream Consumers of Outputs
MAP 3.5 Processes for human oversight are defined, assessed, and documented in accordance with organizational policies from the GOVERN function.	AIGE-CTL-DEPLOY-003 Oversight by trained people with authority to stop
MAP 4.1 Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.	AIGE-CTL-DATA-001 Dataset Admission Gate at Read Time AIGE-CTL-DATA-003 Training-Data Rights Ledger Row per Source
MAP 4.2 Internal risk controls for components of the AI system, including third-party AI technologies, are identified and documented.	AIGE-CTL-EVAL-001 Authorization Boundary AIGE-CTL-EVAL-004 Tool and Action Mediation
MEASURE 2.1 Test sets, metrics, and details about the tools used during TEVV are documented.	AIGE-CTL-EVAL-008 Harness and Configuration Attestation AIGE-CTL-ASSURE-001 Test Plan Frozen Before Evaluation
MEASURE 2.3 AI system performance or assurance criteria are measured qualitatively or quantitatively and demonstrated for conditions similar to deployment setting(s). Measures are documented.	AIGE-CTL-EVAL-009 Evaluation Validity Checks AIGE-CTL-ASSURE-002 Release Blocked Below the Eval Threshold AIGE-CTL-ASSURE-003 Signed Test Report Against the Plan AIGE-CTL-DEPLOY-005 Staged rollout with pre-registered rollback criteria
MEASURE 2.4 The functionality and behavior of the AI system and its components – as identified in the MAP function – are monitored when in production.	AIGE-CTL-DEPLOY-008 Monitoring plan with thresholds, owners and consequences
MEASURE 2.7 AI system security and resilience – as identified in the MAP function – are evaluated and documented.	AIGE-CTL-EVAL-002 Network Egress Control AIGE-CTL-EVAL-003 Credential Isolation AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load
MEASURE 2.10 Privacy risk of the AI system – as identified in the MAP function – is examined and documented.	AIGE-CTL-DATA-004 Lawful Basis and Assessment per Processing Stage
MEASURE 2.11 Fairness and bias – as identified in the MAP function – are evaluated and results are documented.	AIGE-CTL-DEPLOY-009 Fairness monitored by group in production
MEASURE 2.13 Effectiveness of the employed TEVV metrics and processes in the MEASURE function are evaluated and documented.	AIGE-CTL-EVAL-009 Evaluation Validity Checks
MEASURE 3.1 Approaches, personnel, and documentation are in place to regularly identify and track existing, unanticipated, and emergent AI risks based on factors such as intended and actual performance in deployed contexts.	AIGE-CTL-EVAL-005 Monitoring Integrity AIGE-CTL-DEPLOY-008 Monitoring plan with thresholds, owners and consequences
MANAGE 1.1 A determination is made as to whether the AI system achieves its intended purposes and stated objectives and whether its development or deployment should proceed.	AIGE-CTL-DEPLOY-001 Deployment decision record before use AIGE-CTL-DEPLOY-004 Go-live decision with conditions as code AIGE-CTL-DEPLOY-005 Staged rollout with pre-registered rollback criteria
MANAGE 1.4 Negative residual risks (defined as the sum of all unmitigated risks) to both downstream acquirers of AI systems and end users are documented.	AIGE-CTL-DATA-012 Registered Downstream Consumers of Outputs
MANAGE 2.4 Mechanisms are in place and applied, and responsibilities are assigned and understood, to supersede, disengage, or deactivate AI systems that demonstrate performance or outcomes inconsistent with intended use.	AIGE-CTL-EVAL-006 Stop Conditions AIGE-CTL-AGENT-010 Per-agent circuit breaker AIGE-CTL-AGENT-011 Drilled kill switch AIGE-CTL-DEPLOY-005 Staged rollout with pre-registered rollback criteria AIGE-CTL-DEPLOY-006 Pinned versions and a tested path back AIGE-CTL-DEPLOY-012 Deactivation triggers, degraded modes and suspension
MANAGE 3.1 AI risks and benefits from third-party resources are regularly monitored, and risk controls are applied and documented.	AIGE-CTL-DEPLOY-006 Pinned versions and a tested path back AIGE-CTL-DEPLOY-014 Sanctioned AI gateway for staff use
MANAGE 3.2 Pre-trained models which are used for development are monitored as part of AI system regular monitoring and maintenance.	AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load
MANAGE 4.1 Post-deployment AI system monitoring plans are implemented, including mechanisms for capturing and evaluating input from users and other relevant AI actors, appeal and override, decommissioning, incident response, recovery, and change management.	AIGE-CTL-ASSURE-005 Live Control Status from the Assurance Store AIGE-CTL-DEPLOY-008 Monitoring plan with thresholds, owners and consequences
MANAGE 4.3 Incidents and errors are communicated to relevant AI actors, including affected communities. Processes for tracking, responding to, and recovering from incidents and errors are followed and documented.	AIGE-CTL-EVAL-007 Incident Evidence Preservation AIGE-CTL-DEPLOY-011 Serious incident reporting clocks

OWASP Top 10 for LLM Applications 2026

Version 2026 (published 3 Aug 2026); ids as the catalogue prints them. 6 ids, 12 mappings. Source.

The controls mapped to each clause or id of OWASP Top 10 for LLM Applications 2026
Clause or id	Controls
LLM02:2026 Sensitive Information Disclosure	AIGE-CTL-EVAL-002 Network Egress Control AIGE-CTL-DEPLOY-014 Sanctioned AI gateway for staff use
LLM03:2026 Excessive Agency	AIGE-CTL-EVAL-001 Authorization Boundary
LLM04:2026 Supply Chain	AIGE-CTL-EVAL-008 Harness and Configuration Attestation AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load AIGE-CTL-ASSURE-011 Safe Model Formats and Digest-Pinned Third-Party Models AIGE-CTL-ASSURE-012 AI Bill of Materials per Build
LLM05:2026 Data and Model Poisoning	AIGE-CTL-DATA-001 Dataset Admission Gate at Read Time AIGE-CTL-DATA-009 Signed Snapshot Integrity
LLM06:2026 Unbounded Consumption	AIGE-CTL-EVAL-006 Stop Conditions
LLM10:2026 Improper Output Handling	AIGE-CTL-EVAL-004 Tool and Action Mediation AIGE-CTL-DATA-012 Registered Downstream Consumers of Outputs

OWASP Top 10 for Agentic Applications 2026

Version 2026 (published 9 Dec 2025); ids as the catalogue prints them. 10 ids, 42 mappings. Source.

The controls mapped to each clause or id of OWASP Top 10 for Agentic Applications 2026
Clause or id	Controls
ASI01 Agent Goal Hijack	AIGE-CTL-EVAL-004 Tool and Action Mediation AIGE-CTL-AGENT-007 Runtime guardrail on every tool call AIGE-CTL-ASSURE-002 Release Blocked Below the Eval Threshold
ASI02 Tool Misuse and Exploitation	AIGE-CTL-EVAL-001 Authorization Boundary AIGE-CTL-EVAL-002 Network Egress Control AIGE-CTL-EVAL-004 Tool and Action Mediation AIGE-CTL-AGENT-005 Tool allow-list, deny by default AIGE-CTL-AGENT-007 Runtime guardrail on every tool call AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed AIGE-CTL-AGENT-017 Output and egress filter AIGE-CTL-ASSURE-002 Release Blocked Below the Eval Threshold
ASI03 Identity and Privilege Abuse	AIGE-CTL-EVAL-001 Authorization Boundary AIGE-CTL-EVAL-003 Credential Isolation AIGE-CTL-AGENT-002 Its own identity AIGE-CTL-AGENT-020 MCP authorisation (spec 2026-07-28) AIGE-CTL-AGENT-021 Replace long-lived secrets with short-lived credentials AIGE-CTL-AGENT-022 Delegation, never impersonation
ASI04 Agentic Supply Chain Vulnerabilities	AIGE-CTL-EVAL-008 Harness and Configuration Attestation AIGE-CTL-AGENT-018 MCP server admission gate AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load AIGE-CTL-ASSURE-011 Safe Model Formats and Digest-Pinned Third-Party Models
ASI05 Unexpected Code Execution (RCE)	AIGE-CTL-EVAL-004 Tool and Action Mediation AIGE-CTL-AGENT-016 Code runs only in a sandbox
ASI06 Memory & Context Poisoning	AIGE-CTL-AGENT-023 Memory write gate and rollback
ASI07 Insecure Inter-Agent Communication	AIGE-CTL-AGENT-025 Accountability across hops AIGE-CTL-AGENT-026 Stopping third-party agents at your boundary
ASI08 Cascading Failures	AIGE-CTL-EVAL-006 Stop Conditions AIGE-CTL-AGENT-008 Execution budgets AIGE-CTL-AGENT-010 Per-agent circuit breaker AIGE-CTL-AGENT-025 Accountability across hops AIGE-CTL-DATA-012 Registered Downstream Consumers of Outputs
ASI09 Human-Agent Trust Exploitation	AIGE-CTL-EVAL-004 Tool and Action Mediation AIGE-CTL-AGENT-009 Approval log, bound to the call AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed
ASI10 Rogue Agents	AIGE-CTL-EVAL-005 Monitoring Integrity AIGE-CTL-EVAL-006 Stop Conditions AIGE-CTL-AGENT-001 Registry entry AIGE-CTL-AGENT-010 Per-agent circuit breaker AIGE-CTL-AGENT-011 Drilled kill switch AIGE-CTL-AGENT-019 Local MCP servers sandboxed AIGE-CTL-DEPLOY-013 Shadow AI discovery and registry reconciliation

MITRE ATLAS techniques

Version data release v2026.09 (15 Sep 2026); ids as the catalogue prints them. 7 ids, 10 mappings. Source.

The controls mapped to each clause or id of MITRE ATLAS techniques
Clause or id	Controls
AML.M0007 Sanitize Training Data (mitigation)	AIGE-CTL-DATA-009 Signed Snapshot Integrity
AML.M0025 Maintain AI Dataset Provenance (mitigation)	AIGE-CTL-DATA-009 Signed Snapshot Integrity
AML.T0010 AI Supply Chain Compromise	AIGE-CTL-EVAL-008 Harness and Configuration Attestation AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load AIGE-CTL-ASSURE-011 Safe Model Formats and Digest-Pinned Third-Party Models AIGE-CTL-ASSURE-012 AI Bill of Materials per Build
AML.T0034 Cost Harvesting	AIGE-CTL-EVAL-006 Stop Conditions
AML.T0083 Credentials from AI Agent Configuration (not yet a row of the threat bridge)	AIGE-CTL-EVAL-003 Credential Isolation
AML.T0086 Exfiltration via AI Agent Tool Invocation	AIGE-CTL-EVAL-002 Network Egress Control
AML.T0110 AI Agent Tool Poisoning	AIGE-CTL-EVAL-008 Harness and Configuration Attestation

NIST SP 800-53 Rev. 5

One row per control family; each row names the specific controls cited from it. 8 ids, 10 mappings. Source.

The controls mapped to each clause or id of NIST SP 800-53 Rev. 5
Clause or id	Controls
AC AC-3 Access Enforcement; AC-6 Least Privilege	AIGE-CTL-EVAL-001 Authorization Boundary AIGE-CTL-EVAL-003 Credential Isolation
AU AU-2 Event Logging; AU-9 Protection of Audit Information; AU-12 Audit Record Generation	AIGE-CTL-EVAL-005 Monitoring Integrity AIGE-CTL-EVAL-007 Incident Evidence Preservation
CM CM-2 Baseline Configuration; CM-3 Configuration Change Control; CM-6 Configuration Settings	AIGE-CTL-EVAL-008 Harness and Configuration Attestation
IA IA-5 Authenticator Management	AIGE-CTL-EVAL-003 Credential Isolation
IR IR-4 Incident Handling	AIGE-CTL-EVAL-007 Incident Evidence Preservation
SA SA-11 Developer Testing and Evaluation	AIGE-CTL-EVAL-009 Evaluation Validity Checks
SC SC-7 Boundary Protection; SC-7(5) Deny by default, allow by exception	AIGE-CTL-EVAL-002 Network Egress Control
SI SI-4 System Monitoring	AIGE-CTL-EVAL-005 Monitoring Integrity

AIUC-1

This site is not affiliated with AIUC and holds no AIUC certificate; ids read on AIUC-1's public pages. Each mapping is this project's reading of the requirement text, not AIUC's. 10 ids, 26 mappings. Source.

This site is not affiliated with AIUC and holds no AIUC certificate; ids read on AIUC-1's public pages. Each mapping is this project's reading of the requirement text, not AIUC's.
Clause or id	Controls
A006 Prevent PII leakage Read on its public AIUC-1 page on 2026-09-26; not affiliated with AIUC.	AIGE-CTL-AGENT-017 Output and egress filter
A008 Prevent leakage of credentials and secrets Read on its public AIUC-1 page on 2026-09-26; not affiliated with AIUC.	AIGE-CTL-EVAL-003 Credential Isolation AIGE-CTL-AGENT-017 Output and egress filter
B006 Prevent unauthorized AI agent actions Read on its public AIUC-1 page on 2026-09-26; not affiliated with AIUC.	AIGE-CTL-EVAL-001 Authorization Boundary AIGE-CTL-EVAL-002 Network Egress Control AIGE-CTL-EVAL-004 Tool and Action Mediation AIGE-CTL-AGENT-005 Tool allow-list, deny by default AIGE-CTL-AGENT-012 Trajectory anomaly detection AIGE-CTL-AGENT-016 Code runs only in a sandbox
C002 Conduct pre-deployment testing Read on its public AIUC-1 page on 2026-09-26; not affiliated with AIUC.	AIGE-CTL-AGENT-013 Independent trajectory evals AIGE-CTL-ASSURE-002 Release Blocked Below the Eval Threshold
D003 Restrict unsafe tool calls Read on its public AIUC-1 page on 2026-09-26; not affiliated with AIUC.	AIGE-CTL-EVAL-004 Tool and Action Mediation AIGE-CTL-AGENT-005 Tool allow-list, deny by default AIGE-CTL-AGENT-007 Runtime guardrail on every tool call AIGE-CTL-AGENT-008 Execution budgets AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed
E004 Assign accountability Read on its public AIUC-1 page on 2026-09-26; not affiliated with AIUC.	AIGE-CTL-AGENT-028 Prompts under change control
E008 Review internal processes Read on its public AIUC-1 page on 2026-09-26; not affiliated with AIUC.	AIGE-CTL-ASSURE-009 Internal Audit Answered from the Evidence Store
E010 Establish AI acceptable use policy Read on its public AIUC-1 page on 2026-09-26; not affiliated with AIUC.	AIGE-CTL-DEPLOY-014 Sanctioned AI gateway for staff use
E015 Log AI system activity Read on its public AIUC-1 page on 2026-09-26; not affiliated with AIUC.	AIGE-CTL-EVAL-005 Monitoring Integrity AIGE-CTL-EVAL-007 Incident Evidence Preservation AIGE-CTL-AGENT-004 Traces AIGE-CTL-AGENT-029 Telemetry on the OpenTelemetry GenAI conventions AIGE-CTL-ASSURE-008 Evidence Retention as Code AIGE-CTL-DEPLOY-010 Deployer log retention
E016 Implement AI disclosure mechanisms Read on its public AIUC-1 page on 2026-09-26; not affiliated with AIUC.	AIGE-CTL-AGENT-031 Tell people they are dealing with an AI system

EU AI Act

Named in the controls' other mappings; this site keeps no index of it. 1 id, 1 mapping.

The controls mapped to each clause or id of EU AI Act
Clause or id	Controls
Art. 14(4)(e) stop procedure	AIGE-CTL-EVAL-006 Stop Conditions

IETF RFC 8693

Named in the controls' other mappings; this site keeps no index of it. 1 id, 1 mapping.

The controls mapped to each clause or id of IETF RFC 8693
Clause or id	Controls
act claim delegation names the acting party; never impersonation	AIGE-CTL-EVAL-003 Credential Isolation

ISO/IEC 42001:2023

Named in the controls' other mappings; this site keeps no index of it. 2 ids, 3 mappings.

The controls mapped to each clause or id of ISO/IEC 42001:2023
Clause or id	Controls
9 Performance evaluation: one evidence store answering internal audit (clause heading as chapter 22 names it)	AIGE-CTL-ASSURE-009 Internal Audit Answered from the Evidence Store
9.1 Performance evaluation: monitoring and measurement (cited by the evidence-record and control-observation schemas)	AIGE-CTL-ASSURE-004 Common Signed Evidence Record AIGE-CTL-ASSURE-006 Control Observations Filed Against Control Ids

MCP specification 2026-07-28

Named in the controls' other mappings; this site keeps no index of it. 1 id, 1 mapping.

The controls mapped to each clause or id of MCP specification 2026-07-28
Clause or id	Controls
Authorization, Token Handling audience validation; no token passthrough	AIGE-CTL-EVAL-003 Credential Isolation

MITRE ATLAS mitigation

Named in the controls' other mappings; this site keeps no index of it. 10 ids, 12 mappings.

The controls mapped to each clause or id of MITRE ATLAS mitigation
Clause or id	Controls
AML.M0013 Code Signing	AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load
AML.M0014 Verify AI Artifacts	AIGE-CTL-EVAL-008 Harness and Configuration Attestation AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load
AML.M0016 Vulnerability Scanning	AIGE-CTL-ASSURE-011 Safe Model Formats and Digest-Pinned Third-Party Models
AML.M0023 AI Bill of Materials	AIGE-CTL-EVAL-008 Harness and Configuration Attestation AIGE-CTL-ASSURE-012 AI Bill of Materials per Build
AML.M0024 AI Telemetry Logging	AIGE-CTL-EVAL-005 Monitoring Integrity
AML.M0028 AI Agent Tools Permissions Configuration	AIGE-CTL-EVAL-004 Tool and Action Mediation
AML.M0029 Human In-the-Loop for AI Agent Actions	AIGE-CTL-EVAL-004 Tool and Action Mediation
AML.M0030 Restrict AI Agent Tool Invocation on Untrusted Data	AIGE-CTL-EVAL-004 Tool and Action Mediation
AML.M0032 Segmentation of AI Agent Components	AIGE-CTL-EVAL-002 Network Egress Control
AML.M0036 Limit AI Workload Resource Consumption	AIGE-CTL-EVAL-006 Stop Conditions

NIST SP 800-218A

Named in the controls' other mappings; this site keeps no index of it. 2 ids, 2 mappings.

The controls mapped to each clause or id of NIST SP 800-218A
Clause or id	Controls
PS.1.3 Protect model weights and configuration parameters	AIGE-CTL-EVAL-008 Harness and Configuration Attestation
PS.3.2 Keep provenance data for every component of a release	AIGE-CTL-EVAL-008 Harness and Configuration Attestation

SPIFFE

Named in the controls' other mappings; this site keeps no index of it. 1 id, 1 mapping.

The controls mapped to each clause or id of SPIFFE
Clause or id	Controls
SVID short-lived workload identity documents	AIGE-CTL-EVAL-003 Credential Isolation

By profile

The same mappings read from the control side: each control of a profile with the ids it maps to, framework by framework. NIST SP 800-53 ids appear here as the control cites them, not by family. AIUC-1: This site is not affiliated with AIUC and holds no AIUC certificate; ids read on AIUC-1's public pages. Each mapping is this project's reading of the requirement text, not AIUC's.

Evaluation Environment Control Profile

9 controls, v0.2. The profile page has each control in full.

The ids each control of the evaluation environment profile maps to, per framework
Control	Ids per framework
AIGE-CTL-EVAL-001 Authorization Boundary	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART14 CSA AI Controls Matrix (AICM) v1.1: AIGE-OBL-CSA-AICM-AGENTIC OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC Singapore Model AI Governance Framework for Agentic AI: AIGE-OBL-SG-AGENTIC-IDENTITY ISO/IEC 42001:2023 Annex A: A.6.2.2, A.9.2 NIST AI Risk Management Framework (AI RMF 1.0): MAP 4.2 OWASP Top 10 for LLM Applications 2026: LLM03:2026 OWASP Top 10 for Agentic Applications 2026: ASI02, ASI03 NIST SP 800-53 Rev. 5: AC-3, AC-6 AIUC-1: B006
AIGE-CTL-EVAL-002 Network Egress Control	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15 OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC OWASP Top 10 for LLM Applications 2026: AIGE-OBL-OWASP-LLM ISO/IEC 42001:2023 Annex A: A.6.2.6 NIST AI Risk Management Framework (AI RMF 1.0): MEASURE 2.7 OWASP Top 10 for LLM Applications 2026: LLM02:2026 OWASP Top 10 for Agentic Applications 2026: ASI02 MITRE ATLAS techniques: AML.T0086 NIST SP 800-53 Rev. 5: SC-7, SC-7(5) AIUC-1: B006 MITRE ATLAS mitigation: AML.M0032
AIGE-CTL-EVAL-003 Credential Isolation	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15 NIST AI Agent Standards Initiative: AIGE-OBL-NIST-AGENTS OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC Singapore Model AI Governance Framework for Agentic AI: AIGE-OBL-SG-AGENTIC-IDENTITY ISO/IEC 42001:2023 Annex A: A.6.2.6, A.9.2 NIST AI Risk Management Framework (AI RMF 1.0): MEASURE 2.7 OWASP Top 10 for Agentic Applications 2026: ASI03 MITRE ATLAS techniques: AML.T0083 NIST SP 800-53 Rev. 5: AC-6, IA-5 AIUC-1: A008 IETF RFC 8693: act claim MCP specification 2026-07-28: Authorization, Token Handling SPIFFE: SVID
AIGE-CTL-EVAL-004 Tool and Action Mediation	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART14 OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC OWASP Agent Control Standard (ACS): AIGE-OBL-OWASP-ACS Singapore Model AI Governance Framework for Agentic AI: AIGE-OBL-SG-AGENTIC-CHECKPOINTS ISO/IEC 42001:2023 Annex A: A.9.2 NIST AI Risk Management Framework (AI RMF 1.0): MAP 4.2 OWASP Top 10 for LLM Applications 2026: LLM10:2026 OWASP Top 10 for Agentic Applications 2026: ASI01, ASI02, ASI05, ASI09 AIUC-1: B006, D003 MITRE ATLAS mitigation: AML.M0028, AML.M0029, AML.M0030
AIGE-CTL-EVAL-005 Monitoring Integrity	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART12 NIST AI RMF: AIGE-OBL-NISTRMF-MEASURE ISO/IEC 42001:2023 Annex A: A.6.2.6, A.6.2.8 NIST AI Risk Management Framework (AI RMF 1.0): MEASURE 3.1 OWASP Top 10 for Agentic Applications 2026: ASI10 NIST SP 800-53 Rev. 5: AU-2, AU-9, AU-12, SI-4 AIUC-1: E015 MITRE ATLAS mitigation: AML.M0024
AIGE-CTL-EVAL-006 Stop Conditions	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART14 NIST AI RMF: AIGE-OBL-NISTRMF-MANAGE OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC TC260 AI Safety Governance Framework 3.0: AIGE-OBL-CN-TC260-AGENTS ISO/IEC 42001:2023 Annex A: A.6.2.6 NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 2.4 OWASP Top 10 for LLM Applications 2026: LLM06:2026 OWASP Top 10 for Agentic Applications 2026: ASI08, ASI10 MITRE ATLAS techniques: AML.T0034 EU AI Act: Art. 14(4)(e) MITRE ATLAS mitigation: AML.M0036
AIGE-CTL-EVAL-007 Incident Evidence Preservation	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART12, AIGE-OBL-EUAIA-ART26-6, AIGE-OBL-EUAIA-ART73 GPAI Code of Practice: AIGE-OBL-GPAICOP-SAFETY-C9 ISO/IEC 42001: AIGE-OBL-ISO42001-A8 ISO/IEC 42001:2023 Annex A: A.6.2.8, A.8.4 NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 4.3 NIST SP 800-53 Rev. 5: AU-9, IR-4 AIUC-1: E015
AIGE-CTL-EVAL-008 Harness and Configuration Attestation	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15 ISO/IEC 42001: AIGE-OBL-ISO42001-A6 OWASP AIBOM: AIGE-OBL-OWASP-AIBOM ISO/IEC 42001:2023 Annex A: A.6.2.4 NIST AI Risk Management Framework (AI RMF 1.0): MEASURE 2.1 OWASP Top 10 for LLM Applications 2026: LLM04:2026 OWASP Top 10 for Agentic Applications 2026: ASI04 MITRE ATLAS techniques: AML.T0010, AML.T0110 NIST SP 800-53 Rev. 5: CM-2, CM-3, CM-6 MITRE ATLAS mitigation: AML.M0014, AML.M0023 NIST SP 800-218A: PS.1.3, PS.3.2
AIGE-CTL-EVAL-009 Evaluation Validity Checks	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART9, AIGE-OBL-EUAIA-ART15, AIGE-OBL-EUAIA-ART55 ISO/IEC 42001: AIGE-OBL-ISO42001-A6 NIST AI RMF: AIGE-OBL-NISTRMF-MEASURE NIST AI 600-1 Generative AI Profile: AIGE-OBL-NIST-AI600-1 ISO/IEC 42001:2023 Annex A: A.6.2.4 NIST AI Risk Management Framework (AI RMF 1.0): MEASURE 2.3, MEASURE 2.13 NIST SP 800-53 Rev. 5: SA-11

Agent Runtime Control Profile

31 controls, v0.1. The profile page has each control in full.

The ids each control of the agent runtime profile maps to, per framework
Control	Ids per framework
AIGE-CTL-AGENT-001 Registry entry	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART14, AIGE-OBL-EUAIA-ART26, AIGE-OBL-EUAIA-ART72 OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.6, A.6.2.8 OWASP Top 10 for Agentic Applications 2026: ASI10
AIGE-CTL-AGENT-002 Its own identity	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15 NIST AI Agent Standards Initiative: AIGE-OBL-NIST-AGENTS CSA AI Controls Matrix (AICM) v1.1: AIGE-OBL-CSA-AICM-AGENTIC OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.5 OWASP Top 10 for Agentic Applications 2026: ASI03
AIGE-CTL-AGENT-003 Read-only tools	None yet
AIGE-CTL-AGENT-004 Traces	AIUC-1: E015
AIGE-CTL-AGENT-005 Tool allow-list, deny by default	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART14, AIGE-OBL-EUAIA-ART15 CSA AI Controls Matrix (AICM) v1.1: AIGE-OBL-CSA-AICM-AGENTIC OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.6, A.9.2 OWASP Top 10 for Agentic Applications 2026: ASI02 AIUC-1: B006, D003
AIGE-CTL-AGENT-006 Checkpoint before every write	None yet
AIGE-CTL-AGENT-007 Runtime guardrail on every tool call	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART14, AIGE-OBL-EUAIA-ART15 NIST AI Agent Standards Initiative: AIGE-OBL-NIST-AGENTS CSA AI Controls Matrix (AICM) v1.1: AIGE-OBL-CSA-AICM-AGENTIC OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.4, A.6.2.6, A.9.2 OWASP Top 10 for Agentic Applications 2026: ASI01, ASI02 AIUC-1: D003
AIGE-CTL-AGENT-008 Execution budgets	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15, AIGE-OBL-EUAIA-ART72 NIST AI RMF: AIGE-OBL-NISTRMF-MANAGE OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.6 OWASP Top 10 for Agentic Applications 2026: ASI08 AIUC-1: D003
AIGE-CTL-AGENT-009 Approval log, bound to the call	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART13, AIGE-OBL-EUAIA-ART14, AIGE-OBL-EUAIA-ART50 OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.8.2, A.9.2 OWASP Top 10 for Agentic Applications 2026: ASI09
AIGE-CTL-AGENT-010 Per-agent circuit breaker	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART14, AIGE-OBL-EUAIA-ART15, AIGE-OBL-EUAIA-ART26, AIGE-OBL-EUAIA-ART72 NIST AI RMF: AIGE-OBL-NISTRMF-MANAGE OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.6, A.6.2.8 NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 2.4 OWASP Top 10 for Agentic Applications 2026: ASI08, ASI10
AIGE-CTL-AGENT-011 Drilled kill switch	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART14, AIGE-OBL-EUAIA-ART26, AIGE-OBL-EUAIA-ART72 OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.6, A.6.2.8 NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 2.4 OWASP Top 10 for Agentic Applications 2026: ASI10
AIGE-CTL-AGENT-012 Trajectory anomaly detection	AIUC-1: B006
AIGE-CTL-AGENT-013 Independent trajectory evals	AIUC-1: C002
AIGE-CTL-AGENT-014 Reversible, bounded actions only	None yet
AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART13, AIGE-OBL-EUAIA-ART14, AIGE-OBL-EUAIA-ART15, AIGE-OBL-EUAIA-ART50 CSA AI Controls Matrix (AICM) v1.1: AIGE-OBL-CSA-AICM-AGENTIC OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.6, A.8.2, A.9.2 OWASP Top 10 for Agentic Applications 2026: ASI02, ASI09 AIUC-1: D003
AIGE-CTL-AGENT-016 Code runs only in a sandbox	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15 OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ETSI EN 304 223: AIGE-OBL-ETSI-304223 ISO/IEC 42001:2023 Annex A: A.6.2.5, A.6.2.6 OWASP Top 10 for Agentic Applications 2026: ASI05 AIUC-1: B006
AIGE-CTL-AGENT-017 Output and egress filter	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART14, AIGE-OBL-EUAIA-ART15 CSA AI Controls Matrix (AICM) v1.1: AIGE-OBL-CSA-AICM-AGENTIC OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.6, A.9.2 OWASP Top 10 for Agentic Applications 2026: ASI02 AIUC-1: A006, A008
AIGE-CTL-AGENT-018 MCP server admission gate	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15, AIGE-OBL-EUAIA-ART25 ISO/IEC 42001: AIGE-OBL-ISO42001-A10 OWASP AIBOM: AIGE-OBL-OWASP-AIBOM ISO/IEC 42001:2023 Annex A: A.7.5, A.10.3 OWASP Top 10 for Agentic Applications 2026: ASI04
AIGE-CTL-AGENT-019 Local MCP servers sandboxed	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART14, AIGE-OBL-EUAIA-ART15, AIGE-OBL-EUAIA-ART25, AIGE-OBL-EUAIA-ART26, AIGE-OBL-EUAIA-ART72 ISO/IEC 42001: AIGE-OBL-ISO42001-A10 OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC OWASP AIBOM: AIGE-OBL-OWASP-AIBOM ISO/IEC 42001:2023 Annex A: A.6.2.6, A.6.2.8, A.7.5, A.10.3 OWASP Top 10 for Agentic Applications 2026: ASI04, ASI10
AIGE-CTL-AGENT-020 MCP authorisation (spec 2026-07-28)	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15 NIST AI Agent Standards Initiative: AIGE-OBL-NIST-AGENTS CSA AI Controls Matrix (AICM) v1.1: AIGE-OBL-CSA-AICM-AGENTIC OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.5 OWASP Top 10 for Agentic Applications 2026: ASI03
AIGE-CTL-AGENT-021 Replace long-lived secrets with short-lived credentials	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15 NIST AI Agent Standards Initiative: AIGE-OBL-NIST-AGENTS CSA AI Controls Matrix (AICM) v1.1: AIGE-OBL-CSA-AICM-AGENTIC OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.5 OWASP Top 10 for Agentic Applications 2026: ASI03
AIGE-CTL-AGENT-022 Delegation, never impersonation	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15 NIST AI Agent Standards Initiative: AIGE-OBL-NIST-AGENTS CSA AI Controls Matrix (AICM) v1.1: AIGE-OBL-CSA-AICM-AGENTIC OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.5 OWASP Top 10 for Agentic Applications 2026: ASI03
AIGE-CTL-AGENT-023 Memory write gate and rollback	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART12, AIGE-OBL-EUAIA-ART15 OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.6, A.6.2.8 OWASP Top 10 for Agentic Applications 2026: ASI06
AIGE-CTL-AGENT-024 Retention and erasure for personal data in memory	None yet
AIGE-CTL-AGENT-025 Accountability across hops	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15, AIGE-OBL-EUAIA-ART72 NIST AI RMF: AIGE-OBL-NISTRMF-MANAGE NIST AI Agent Standards Initiative: AIGE-OBL-NIST-AGENTS CSA AI Controls Matrix (AICM) v1.1: AIGE-OBL-CSA-AICM-AGENTIC OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.5, A.6.2.6 OWASP Top 10 for Agentic Applications 2026: ASI07, ASI08
AIGE-CTL-AGENT-026 Stopping third-party agents at your boundary	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15 NIST AI Agent Standards Initiative: AIGE-OBL-NIST-AGENTS CSA AI Controls Matrix (AICM) v1.1: AIGE-OBL-CSA-AICM-AGENTIC OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.5 OWASP Top 10 for Agentic Applications 2026: ASI07
AIGE-CTL-AGENT-027 Data classes recorded, with the DPIA linked	None yet
AIGE-CTL-AGENT-028 Prompts under change control	AIUC-1: E004
AIGE-CTL-AGENT-029 Telemetry on the OpenTelemetry GenAI conventions	AIUC-1: E015
AIGE-CTL-AGENT-030 EU AI Act hooks for a high-risk purpose	None yet
AIGE-CTL-AGENT-031 Tell people they are dealing with an AI system	AIUC-1: E016

Data Admission and Privacy Control Profile

12 controls, v0.1. The profile page has each control in full.

The ids each control of the data admission and privacy profile maps to, per framework
Control	Ids per framework
AIGE-CTL-DATA-001 Dataset Admission Gate at Read Time	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART10 General Data Protection Regulation (EU) 2016/679: AIGE-OBL-GDPR-ART5-1B ISO/IEC 42001: AIGE-OBL-ISO42001-A7 ISO/IEC 42001:2023 Annex A: A.7.2, A.7.4, A.7.5 NIST AI Risk Management Framework (AI RMF 1.0): MAP 2.3, MAP 4.1 OWASP Top 10 for LLM Applications 2026: LLM05:2026
AIGE-CTL-DATA-002 Dataset Card for Every Admitted Version	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART10 ISO/IEC 42001: AIGE-OBL-ISO42001-A7 ISO/IEC 42001:2023 Annex A: A.7.2, A.7.5 NIST AI Risk Management Framework (AI RMF 1.0): MAP 2.3
AIGE-CTL-DATA-003 Training-Data Rights Ledger Row per Source	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART10, AIGE-OBL-EUAIA-ART53-1C General Data Protection Regulation (EU) 2016/679: AIGE-OBL-GDPR-ART5-1B Directive (EU) 2019/790 on copyright in the Digital Single Market: AIGE-OBL-DSM-ART4-3 ISO/IEC 42001:2023 Annex A: A.7.5 NIST AI Risk Management Framework (AI RMF 1.0): GOVERN 6.1, MAP 4.1
AIGE-CTL-DATA-004 Lawful Basis and Assessment per Processing Stage	General Data Protection Regulation (EU) 2016/679: AIGE-OBL-GDPR-ART6, AIGE-OBL-GDPR-ART35-36 NIST AI Risk Management Framework (AI RMF 1.0): MEASURE 2.10
AIGE-CTL-DATA-005 Purpose Match Before Reuse of Data	General Data Protection Regulation (EU) 2016/679: AIGE-OBL-GDPR-ART5-1B
AIGE-CTL-DATA-006 Personal Data Screening and Minimisation	General Data Protection Regulation (EU) 2016/679: AIGE-OBL-GDPR-ART25
AIGE-CTL-DATA-007 Special-Category Data Conditions	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART4A General Data Protection Regulation (EU) 2016/679: AIGE-OBL-GDPR-ART9, AIGE-OBL-GDPR-ART30
AIGE-CTL-DATA-008 Fitness-for-Purpose Checks Before Admission	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART10 ISO/IEC 42001: AIGE-OBL-ISO42001-A7 ISO/IEC 42001:2023 Annex A: A.7.4 NIST AI Risk Management Framework (AI RMF 1.0): MAP 2.3
AIGE-CTL-DATA-009 Signed Snapshot Integrity	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART10 OWASP Top 10 for LLM Applications 2026: AIGE-OBL-OWASP-LLM ISO/IEC 42001:2023 Annex A: A.7.5 OWASP Top 10 for LLM Applications 2026: LLM05:2026 MITRE ATLAS techniques: AML.M0007, AML.M0025
AIGE-CTL-DATA-010 Lineage from Training Runs to Admitted Sources	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART10 ISO/IEC 42001: AIGE-OBL-ISO42001-A7 ISO/IEC 42001:2023 Annex A: A.7.5
AIGE-CTL-DATA-011 Rights Changes Propagated to Affected Models	General Data Protection Regulation (EU) 2016/679: AIGE-OBL-GDPR-ART7, AIGE-OBL-GDPR-ART15-17-21 Directive (EU) 2019/790 on copyright in the Digital Single Market: AIGE-OBL-DSM-ART4-3
AIGE-CTL-DATA-012 Registered Downstream Consumers of Outputs	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART9, AIGE-OBL-EUAIA-ART25, AIGE-OBL-EUAIA-ART50 ISO/IEC 42001: AIGE-OBL-ISO42001-A8, AIGE-OBL-ISO42001-A9 ISO/IEC 42001:2023 Annex A: A.8.2, A.9.4 NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 1.4, MAP 1.1, MAP 3.3 OWASP Top 10 for LLM Applications 2026: LLM10:2026 OWASP Top 10 for Agentic Applications 2026: ASI08

Assurance and Evidence Control Profile

12 controls, v0.1. The profile page has each control in full.

The ids each control of the assurance and evidence profile maps to, per framework
Control	Ids per framework
AIGE-CTL-ASSURE-001 Test Plan Frozen Before Evaluation	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART9 ISO/IEC 42001: AIGE-OBL-ISO42001-A6 NIST AI RMF: AIGE-OBL-NISTRMF-MEASURE ISO/IEC 42001:2023 Annex A: A.6.2.4 NIST AI Risk Management Framework (AI RMF 1.0): MEASURE 2.1
AIGE-CTL-ASSURE-002 Release Blocked Below the Eval Threshold	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15, AIGE-OBL-EUAIA-ART55 NIST AI RMF: AIGE-OBL-NISTRMF-MEASURE OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC ISO/IEC 42001:2023 Annex A: A.6.2.4 NIST AI Risk Management Framework (AI RMF 1.0): MEASURE 2.3 OWASP Top 10 for Agentic Applications 2026: ASI01, ASI02 AIUC-1: C002
AIGE-CTL-ASSURE-003 Signed Test Report Against the Plan	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART9, AIGE-OBL-EUAIA-ART11 ISO/IEC 42001: AIGE-OBL-ISO42001-A6 NIST AI RMF: AIGE-OBL-NISTRMF-MEASURE ISO/IEC 42001:2023 Annex A: A.6.2.4 NIST AI Risk Management Framework (AI RMF 1.0): MEASURE 2.3
AIGE-CTL-ASSURE-004 Common Signed Evidence Record	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART12, AIGE-OBL-EUAIA-ART17, AIGE-OBL-EUAIA-ART72 NIST AI RMF: AIGE-OBL-NISTRMF-MANAGE ISO/IEC 42001:2023: 9.1
AIGE-CTL-ASSURE-005 Live Control Status from the Assurance Store	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART72 NIST AI RMF: AIGE-OBL-NISTRMF-GOVERN, AIGE-OBL-NISTRMF-MANAGE CSA AI Controls Matrix (AICM) v1.1: AIGE-OBL-CSA-AICM NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 4.1
AIGE-CTL-ASSURE-006 Control Observations Filed Against Control Ids	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART12, AIGE-OBL-EUAIA-ART15, AIGE-OBL-EUAIA-ART17 ISO/IEC 42001:2023: 9.1
AIGE-CTL-ASSURE-007 Machine-Readable Evidence in OSCAL	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART12, AIGE-OBL-EUAIA-ART17, AIGE-OBL-EUAIA-ART72 NIST AI RMF: AIGE-OBL-NISTRMF-GOVERN, AIGE-OBL-NISTRMF-MANAGE
AIGE-CTL-ASSURE-008 Evidence Retention as Code	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART12, AIGE-OBL-EUAIA-ART18, AIGE-OBL-EUAIA-ART19 AIUC-1: E015
AIGE-CTL-ASSURE-009 Internal Audit Answered from the Evidence Store	AIUC-1: E008 ISO/IEC 42001:2023: 9
AIGE-CTL-ASSURE-010 Model Artefacts Signed at Build and Verified Before Load	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15, AIGE-OBL-EUAIA-ART55 ISO/IEC 42001: AIGE-OBL-ISO42001-A6, AIGE-OBL-ISO42001-A10 NIST AI RMF: AIGE-OBL-NISTRMF-MANAGE OWASP Top 10 for Agentic Applications 2026: AIGE-OBL-OWASP-AGENTIC OWASP Top 10 for LLM Applications 2026: AIGE-OBL-OWASP-LLM ISO/IEC 42001:2023 Annex A: A.6.2.5, A.10.3 NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 3.2, MEASURE 2.7 OWASP Top 10 for LLM Applications 2026: LLM04:2026 OWASP Top 10 for Agentic Applications 2026: ASI04 MITRE ATLAS techniques: AML.T0010 MITRE ATLAS mitigation: AML.M0013, AML.M0014
AIGE-CTL-ASSURE-011 Safe Model Formats and Digest-Pinned Third-Party Models	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART15 ISO/IEC 42001: AIGE-OBL-ISO42001-A10 OWASP Top 10 for LLM Applications 2026: AIGE-OBL-OWASP-LLM ISO/IEC 42001:2023 Annex A: A.10.3 OWASP Top 10 for LLM Applications 2026: LLM04:2026 OWASP Top 10 for Agentic Applications 2026: ASI04 MITRE ATLAS techniques: AML.T0010 MITRE ATLAS mitigation: AML.M0016
AIGE-CTL-ASSURE-012 AI Bill of Materials per Build	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART11, AIGE-OBL-EUAIA-ART53 NIST AI RMF: AIGE-OBL-NISTRMF-MAP CSA AI Controls Matrix (AICM) v1.1: AIGE-OBL-CSA-AICM OWASP AIBOM: AIGE-OBL-OWASP-AIBOM ISO/IEC 42001:2023 Annex A: A.7.5, A.10.3 OWASP Top 10 for LLM Applications 2026: LLM04:2026 MITRE ATLAS techniques: AML.T0010 MITRE ATLAS mitigation: AML.M0023

Deployment and Monitoring Control Profile

15 controls, v0.1. The profile page has each control in full.

The ids each control of the deployment and monitoring profile maps to, per framework
Control	Ids per framework
AIGE-CTL-DEPLOY-001 Deployment decision record before use	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART26 ISO/IEC 42001:2023 Annex A: A.6.2.5, A.9.4 NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 1.1, MAP 1.1
AIGE-CTL-DEPLOY-002 Instructions for use held and followed	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART13, AIGE-OBL-EUAIA-ART26 ISO/IEC 42001:2023 Annex A: A.8.2
AIGE-CTL-DEPLOY-003 Oversight by trained people with authority to stop	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART4, AIGE-OBL-EUAIA-ART14, AIGE-OBL-EUAIA-ART26-2 ISO/IEC 42001:2023 Annex A: A.9.2 NIST AI Risk Management Framework (AI RMF 1.0): MAP 3.5
AIGE-CTL-DEPLOY-004 Go-live decision with conditions as code	ISO/IEC 42001:2023 Annex A: A.6.2.5 NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 1.1
AIGE-CTL-DEPLOY-005 Staged rollout with pre-registered rollback criteria	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART26-5 ISO/IEC 42001:2023 Annex A: A.6.2.5, A.6.2.6 NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 1.1, MANAGE 2.4, MEASURE 2.3
AIGE-CTL-DEPLOY-006 Pinned versions and a tested path back	ISO/IEC 42001:2023 Annex A: A.6.2.5 NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 2.4, MANAGE 3.1
AIGE-CTL-DEPLOY-007 Re-assessment when a change goes beyond what was foreseen	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART25
AIGE-CTL-DEPLOY-008 Monitoring plan with thresholds, owners and consequences	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART9, AIGE-OBL-EUAIA-ART26-5, AIGE-OBL-EUAIA-ART72 ISO/IEC 42001:2023 Annex A: A.6.2.6 NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 4.1, MEASURE 2.4, MEASURE 3.1
AIGE-CTL-DEPLOY-009 Fairness monitored by group in production	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART4A, AIGE-OBL-EUAIA-ART15-4 ISO/IEC 42001:2023 Annex A: A.6.2.6 NIST AI Risk Management Framework (AI RMF 1.0): MEASURE 2.11
AIGE-CTL-DEPLOY-010 Deployer log retention	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART26-6 ISO/IEC 42001:2023 Annex A: A.6.2.8 AIUC-1: E015
AIGE-CTL-DEPLOY-011 Serious incident reporting clocks	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART26-5, AIGE-OBL-EUAIA-ART73 General Data Protection Regulation (EU) 2016/679: AIGE-OBL-GDPR-ART33-34 ISO/IEC 42001:2023 Annex A: A.8.4 NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 4.3
AIGE-CTL-DEPLOY-012 Deactivation triggers, degraded modes and suspension	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART5, AIGE-OBL-EUAIA-ART20, AIGE-OBL-EUAIA-ART26-5 ISO/IEC 42001:2023 Annex A: A.6.2.6 NIST AI Risk Management Framework (AI RMF 1.0): MANAGE 2.4
AIGE-CTL-DEPLOY-013 Shadow AI discovery and registry reconciliation	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART49-71 NIST AI Risk Management Framework (AI RMF 1.0): GOVERN 1.6 OWASP Top 10 for Agentic Applications 2026: ASI10
AIGE-CTL-DEPLOY-014 Sanctioned AI gateway for staff use	EU AI Act (post-Omnibus): AIGE-OBL-EUAIA-ART4 ISO/IEC 42001:2023 Annex A: A.9.2, A.10.3 NIST AI Risk Management Framework (AI RMF 1.0): GOVERN 2.2, GOVERN 6.1, MANAGE 3.1 OWASP Top 10 for LLM Applications 2026: LLM02:2026 AIUC-1: E010
AIGE-CTL-DEPLOY-015 Retirement runbook with access and data removal	NIST AI Risk Management Framework (AI RMF 1.0): GOVERN 1.7

Machine-readable

All controls as JSON: the crosswalk is its crosswalk key, with the same frameworks, rows and mappings as this page, in the envelope of the open data API.
JSON Schema of the controls dataset: the crosswalk key is a closed object.
This page as Markdown: /controls/crosswalk.md.

Propose a mapping

A mapping that does not hold, or one that is missing: say so on GitHub. Name the control, the framework and the clause or id, and quote the public text the mapping rests on. Mappings are added only when an id can be checked against the framework's own public text.

What this crosswalk is

Frameworks

Obligation register

EU AI Act (post-Omnibus)

GPAI Code of Practice

General Data Protection Regulation (EU) 2016/679

Directive (EU) 2019/790 on copyright in the Digital Single Market

ISO/IEC 42001

NIST AI RMF

NIST AI Agent Standards Initiative

NIST AI 600-1 Generative AI Profile

CSA AI Controls Matrix (AICM) v1.1

OWASP Top 10 for Agentic Applications 2026

OWASP Top 10 for LLM Applications 2026

OWASP Agent Control Standard (ACS)

OWASP AIBOM

Singapore Model AI Governance Framework for Agentic AI

TC260 AI Safety Governance Framework 3.0

ETSI EN 304 223

ISO/IEC 42001:2023 Annex A

NIST AI Risk Management Framework (AI RMF 1.0)

OWASP Top 10 for LLM Applications 2026

OWASP Top 10 for Agentic Applications 2026

MITRE ATLAS techniques

NIST SP 800-53 Rev. 5

AIUC-1

EU AI Act

IETF RFC 8693

ISO/IEC 42001:2023

MCP specification 2026-07-28

MITRE ATLAS mitigation

NIST SP 800-218A

SPIFFE

By profile

Evaluation Environment Control Profile

Agent Runtime Control Profile

Data Admission and Privacy Control Profile

Assurance and Evidence Control Profile

Deployment and Monitoring Control Profile

Machine-readable

Propose a mapping