Standards & Frameworks

• [1]

  NIST AI Risk Management Framework (AI RMF 1.0)

  National Institute of Standards and Technology, 2023.

  Used in: Notes — NIST AI RMF implementation gaps

• [2]

  NIST AI RMF Playbook

  NIST AI Resource Center. Living document, updated periodically.

  Used in: Notes — NIST AI RMF implementation gaps

• [3]

  ISO/IEC 27001:2013 — Information security management systems

  International Organization for Standardization.

  Used in: Notes — vendor access review, data classification

• [4]

  NIST SP 800-53 Rev. 5 — Security and Privacy Controls

  National Institute of Standards and Technology, 2020.

  Used in: Notes — access control (AC-2)

Regulation

• [5]

  GDPR — General Data Protection Regulation (EU) 2016/679

  European Parliament and Council, 2016. Art. 32 (security of processing).

  Used in: Notes — data classification walkthrough

• [6]

  EU Artificial Intelligence Act — Regulation (EU) 2024/1689

  European Parliament and Council, 2024. Art. 9 (risk management system).

  Used in: Notes — LLM output validation