Frameworks
51 frameworks. One set of evidence.
38 are mapped to 534 requirements, so one approved record can satisfy every requirement it covers. 13 are tracked for reference, with no requirement mapping yet. Counts come straight from the packs catalogue.
| Framework | Requirements | Workflows | Guide |
|---|---|---|---|
| NIST AI RMF 1.0 (AI 100-1) | 72 | 89 | Guide |
| ISO/IEC 42001:2023 AI management system | 65 | 86 | Guide |
| AIUC-1 AI agent standard | 50 | 81 | |
| EU AI Act (Reg. 2024/1689) as amended by Digital Omnibus (Reg. 2026/1744) | 47 | 86 | Guide |
| RBI FREE-AI: Framework for Responsible and Ethical Enablement of AI in the Financial Sector | 33 | 65 | Guide |
| Singapore IMDA Model AI Governance Framework for Agentic AI | 19 | 74 | |
| CSA AI Controls Matrix | 18 | 71 | |
| ISO/IEC 23894:2023 AI risk management guidance | 16 | 35 | |
| MITRE ATLAS | 15 | 4 | |
| ISO/IEC SC 42 supporting standards (method references) | 13 | 47 | |
| UK AI Cyber Security Code of Practice / ETSI EN 304 223 | 13 | 54 | |
| G7 Hiroshima AI Process Code of Conduct + OECD HAIP reporting framework | 12 | 60 | |
| NIST AI 600-1 Generative AI Profile | 12 | 46 | |
| AI Verify testing framework | 11 | 44 | |
| Council of Europe Framework Convention on AI (CETS 225) | 10 | 43 | |
| Japan AI Guidelines for Business | 10 | 65 | |
| OWASP MCP Top 10 (2025 edition, beta) | 10 | 32 | |
| OWASP Top 10 for Agentic Applications 2026 | 10 | 56 | |
| OWASP Top 10 for LLM Applications 2025 | 10 | 41 | |
| Singapore Model AI Governance Framework for Generative AI | 9 | 45 | |
| US OMB M-25-21 (federal AI use) minimum practices | 8 | 36 | |
| CSA MAESTRO agentic threat modelling | 7 | 46 | |
| India AI Governance Guidelines | 7 | 40 | |
| NIST AI 100-2 E2025 Adversarial ML taxonomy | 7 | 31 | |
| Australia Guidance for AI Adoption | 6 | 57 | |
| Google Secure AI Framework (SAIF) | 6 | 26 | |
| China GenAI Interim Measures + AI content labelling measures | 5 | 27 | |
| Korea AI Basic Act + Enforcement Decree | 5 | 28 | |
| OECD AI Principles | 5 | 33 | |
| MAS FEAT principles | 4 | 17 | |
| NIST SP 800-218A SSDF profile for GenAI and dual-use models | 4 | 22 | |
| California SB 53 (frontier AI transparency) | 3 | 11 | |
| IEEE 7000-series (selected) | 3 | 10 | |
| Colorado SB 26-189 (repeals and re-enacts SB 24-205) | 2 | 12 | |
| Illinois HB 3773 (AI in employment) | 2 | 8 | |
| NYC Local Law 144 (AEDT) | 2 | 12 | |
| Texas Responsible AI Governance Act (TRAIGA) | 2 | 11 | |
| ISO/IEC 42005:2025 AI system impact assessment | 1 | 3 | |
| Agentic Risk & Capability Framework | · | · | |
| AI Safety Governance Framework 3.0 | · | · | |
| AILuminate | · | · | |
| Critical AI Security Guidelines | · | · | |
| Emerging Risks and Opportunities of Generative AI for Banks: A Singaporean Perspective | · | · | |
| Ethically Aligned Design | · | · | |
| Ethics and governance of AI for health (incl. large multimodal model guidance) | · | · | |
| FINMA Guidance 08/2024: governance and risk management when using AI | · | · | |
| Guidance for Safe Foundation Model Deployment | · | · | |
| ISO/IEC 38507:2022 Governance implications of the use of AI by organizations | · | · | |
| MIT AI Risk Repository | · | · | |
| Multilayer Framework for Good Cybersecurity Practices for AI | · | · | |
| OWASP Top 10 for Agentic Skills | · | · |
Also in plain English: DPDP Act, NITI Aayog RAI, GDPR.