TC260 AI Safety Governance Framework 3.0: operators' guidelines §5.3 (voluntary; 2026-09-14)

A three-block risk taxonomy (inherent, application, secondary), technological and governance countermeasures and role-based guidelines; operators keep logs for at least six months and audit them, monitor risk in real time, keep a traceable chain of responsibility and assess resilience (§5.3)

By Jorge García Aibar Reviewed 2026-09-20

From clause to evidence Build the artefact, then file every output it produces as a record that names AIGE-OBL-CN-TC260-OPS. Drawn from chapter 08.

Text alternative

Clause: TC260 Framework 3.0, Framework 3.0 §5.3.
Duty holder: Not stated.
Applies from: No date, Voluntary.
Artefact: Risk register keyed….
Layers: Layer 01, Layer 04, Layer 05.
Evidence record: Evidence record v1.
Record schema: Evidence record.
The same topic in 28 other frameworks; the crosswalk section below links each clause.

Id: AIGE-OBL-CN-TC260-OPS
Instrument: TC260 AI Safety Governance Framework 3.0 framework
Clause: Framework 3.0 §5.3
Applies from: No date Voluntary · published 2026-09-14, building on 1.0 (2024) and 2.0 (2025)

The artefact that evidences it

Risk register keyed to the framework's taxonomy; log-retention policy (six months) with audit; real-time risk monitoring; resilience assessment.

What this obligation connects to Solid edges are direct relations, dashed ones looser (a case that cites the same article, a framework whose clauses only touch the topic); patterns and controls take the colour of their stack layer. Select a node to open it; the lists below give every relation in full.

Data table: every relation

Relations of AIGE-OBL-CN-TC260-OPS
Family	Item	Relation
Same crosswalk topic	AI Verify 4.3.1, 4.7.1, 4.2.1, 9.1.1, 9.5.2, 11.2.1, 8.1.1, 8.2.1, 9.12.1, 5.5.1, 3.4.1, 9.8.1, 5.10.1, 4.8.1, 4.1.1, 6.1.1, 5.2.1, 5.9.1, 9.5.4, 1.5.1, 1.6.1, 5.11.1, 9.7.1, 5.3.1, 4.5.2, 9.3.1, 9.4.1, 5.14.1, 6.5.1, 4.6.1	Core clause
Same crosswalk topic	CSA AICM GRC-02, MDS-12, GRC-01, GRC-06, GRC-10, DSP-09, DSP-20, DSP-21, STA-08, IAM-03, LOG-09, LOG-12, TVM-13, AIS-09, AIS-10, MDS-06, MDS-07, AIS-05, SEF-07, SEF-08, STA-10, STA-09, AIS-06, CCC-01, DSP-02	Core clause
Same crosswalk topic	China Algo. Rec. AlgoRec Art. 27, AlgoRec Art. 7, AlgoRec Art. 24, AlgoRec Art. 8, AlgoRec Art. 9	Core clause
Same crosswalk topic	China Deep Synthesis DeepSyn Art. 7, DeepSyn Art. 14, DeepSyn Art. 19, DeepSyn Art. 10, DeepSyn Art. 15, DeepSyn Art. 20	Core clause
Same crosswalk topic	China GenAI Measures GenAI Art. 17, GenAI Art. 9, GenAI Art. 7, GenAI Art. 8, GenAI Art. 11, GenAI Art. 10, GenAI Art. 14, GenAI Art. 15	Core clause
Same crosswalk topic	CoE Convention CoE Art. 16, CoE Art. 9, CoE Art. 16(2)(g)	Core clause
Same crosswalk topic	EU AI Act Art. 9, Art. 3, Art. 17, Art. 4, Art. 87, Art. 27, Art. 10, Art. 10(2)(f)–(g), Art. 4a, Art. 53, Art. 53(1)(c), Art. 5(1)(e), Art. 49, Art. 71, Art. 6, Art. 3(1), Art. 52, Art. 12, Art. 26(6), Art. 26, Art. 19, Art. 5, Art. 15, Art. 5(1)(a)–(b), Art. 55, Art. 60, Art. 15(3), Art. 42(3), Art. 72, Art. 73, Art. 26(5), Art. 3(49), Art. 20, Art. 25, Art. 25(4), Art. 22, Art. 23, Art. 24, Art. 54, Art. 43(4), Art. 79, Art. 86	Core clause
Same crosswalk topic	G7 Code G7 Action 5, G7 Action 1, G7 Action 2, G7 Action 4, G7 Action 11	Core clause
Same crosswalk topic	GAO AI Accountability 1.6, 1.2, 1.1, 1.3, 1.5, 2.1, 2.2, 2.4, 2.5, 3.1, 4.3, 3.7, 3.2, 4.1, 4.2, 2.6, 4.4, 4.5	Core clause
Same crosswalk topic	GB/T 45654 GB/T 45654 Corpus security, GB/T 45654 Security assessment	Core clause
Same crosswalk topic	GDPR Art. 5(2), Art. 35, Art. 36, Art. 5(1)(c), Art. 25, Art. 9, Art. 32, Arts. 33–34, Art. 28, Arts. 44–46	Core clause
Same crosswalk topic	GPAI Code Safety C1, Safety C3, Safety C8, Copyright 1.1–1.5, Safety C5, Safety 3.2, Safety C6, Safety C9, Safety 3.5, Transparency 1.2	Core clause
Same crosswalk topic	ISO 23894 23894 6.4, 23894 6.5, 23894 6.6	Core clause
Same crosswalk topic	ISO 42001 6.1.2, 6.1.3, 8.2, 8.3, A.6, 6.1.4, 5.1, 5.2, 5.3, A.2, A.3, 9.3, 7.2, 9.2, 10.1, 8.4, A.5, A.7, A.7.3, A.4, A.6.2.8, A.9, 9.1, A.8, 10.2, A.10, A.6.2.5, A.6.2.6	Core clause
Same crosswalk topic	ISO 42005 42005 5.8, 42005 6.8, 42005 5.12	Core clause
Same crosswalk topic	Korea AI Act Art. 34(1)(1), Art. 36, Art. 35, Art. 33, Art. 34(1)(5), Art. 32(1)	Core clause
Same crosswalk topic	NIST AI RMF MAP 1, MAP 5, MANAGE 1, GOVERN 1.3, MAP 1.5, MANAGE 1.3, MANAGE 1.4, MEASURE 3, MEASURE 2, GOVERN 1, GOVERN 2, GOVERN 4, GOVERN 5, MAP 3, MAP 2, MEASURE 2.10, MEASURE 2.11, GOVERN 1.6, GOVERN 1.7, MANAGE 4, MANAGE 2, MEASURE 2.7, MEASURE 2.1, MEASURE 1, MANAGE 4.3, MANAGE 2.4, GOVERN 4.3, GOVERN 6, MAP 4, MANAGE 3, MANAGE 3.1, GOVERN 6.2, MANAGE 4.1	Core clause
Same crosswalk topic	OECD AI Principles OECD 1.5(c), OECD 1.5, OECD 1.5(b), OECD 1.4	Core clause
Same crosswalk topic	OWASP Agentic ASI05, ASI04	Core clause
Same crosswalk topic	OWASP LLM LLM05:2026, LLM01:2026, LLM10:2026, LLM06:2026, LLM04:2026	Core clause
Same crosswalk topic	Singapore Agentic Agentic 2.1, Agentic 2.2.1, Agentic 2.3.3, Agentic 2.3.1, Agentic 2.3.2	Core clause
Same crosswalk topic	Singapore GenAI GenAI 1, GenAI 2, GenAI 5, GenAI 6, GenAI 4	Core clause
Same crosswalk topic	TC260 Framework 3.0 TC260 App. 2 II.2, TC260 App. 2 II.6, TC260 App. 2 II.5, TC260 App. 2 II.4	Core clause
Same crosswalk topic	UK ATRS ATRS 2.5.2, ATRS 2.1, ATRS 2.5.1, ATRS 2.4.3, ATRS Tier 1, ATRS 2.1.4	Core clause
Same crosswalk topic	prEN 18228 prEN 18228	Core clause
Same crosswalk topic	prEN 18229-1 prEN 18229-1	Core clause
Same crosswalk topic	China AI Labelling Label Art. 5	Related clause
Same crosswalk topic	EN 18286 EN 18286	Related clause

Patterns that build it

No pattern in the catalogue names this clause on its "Maps to" line yet; the artefact above is the engineering answer.

The same topic in other frameworks

From the topic crosswalk: the clauses filed under the same topics as this one. Mappings are illustrative, not a claim of conformity.

Source

Chapter 08, section China, checked against its sources on the review date above.

Machine-readable

This obligation: /api/v1/obligations/aige-obl-cn-tc260-ops.json
The register: /api/v1/obligations.json · CSV
Schema and stability promise: open data and API

Cite this obligation

García Aibar, J. (2026). TC260 AI Safety Governance Framework 3.0: operators' guidelines §5.3 (voluntary; 2026-09-14) (AIGE-OBL-CN-TC260-OPS). In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0). https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/obligations/aige-obl-cn-tc260-ops. CC BY 4.0

BibTeX

@misc{aige2026obligation,
  author       = {Jorge García Aibar},
  title        = {{TC260 AI Safety Governance Framework 3.0: operators' guidelines §5.3 (voluntary; 2026-09-14) (AIGE-OBL-CN-TC260-OPS)}},
  howpublished = {In AI Governance Engineering: The Thesis \& Body of Knowledge},
  year         = {2026},
  version      = {0.5.0},
  doi          = {10.5281/zenodo.22956197},
  url          = {https://aigovernanceengineer.com/obligations/aige-obl-cn-tc260-ops},
  note         = {Version 0.5.0}
}