genai-security-crosswalk 2.0.0

package/data/entries/DSGAI21.json

@@ -0,0 +1,881 @@
+{
+  "id": "DSGAI21",
+  "name": "Disinformation via Data Poisoning",
+  "source_list": "DSGAI-2026",
+  "version": "2026-Q1",
+  "severity": "High",
+  "aivss_score": null,
+  "audience": [
+    "red-teamer",
+    "security-engineer",
+    "ciso",
+    "compliance",
+    "ml-engineer",
+    "ot-engineer",
+    "auditor",
+    "developer",
+    "data-engineer"
+  ],
+  "mappings": [
+    {
+      "framework": "MITRE ATLAS",
+      "control_id": "AML.T0045",
+      "control_name": "Publish Poisoned Datasets",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Adversary publishes false content in public repositories, documentation sites, or knowledge bases indexed by RAG systems"
+    },
+    {
+      "framework": "MITRE ATLAS",
+      "control_id": "AML.T0020",
+      "control_name": "Poison Training Data",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Adversary introduces false content into RAG corpus through ingestion path — no public publication required"
+    },
+    {
+      "framework": "MITRE ATLAS",
+      "control_id": "AML.T0031",
+      "control_name": "Craft Adversarial Data",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "False content crafted to appear authoritative and rank highly in semantic similarity searches"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "GV-1.7",
+      "control_name": "Policies for trustworthy AI",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Policy on information integrity for AI outputs — source trust verification, cross-verification requirements"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "MS-2.5",
+      "control_name": "Testing — adversarial",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Adversarial testing of RAG pipeline integrity — source poisoning and retrieval manipulation scenarios"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "MS-3.3",
+      "control_name": "Data quality",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Data quality controls on all RAG ingestion — provenance, source trust scoring, anomaly detection"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "MG-2.2",
+      "control_name": "Risk response",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Response for detected RAG poisoning — source quarantine, index rebuild, output correction"
+    },
+    {
+      "framework": "EU AI Act",
+      "control_id": "Training and retrieval data free from errors — source integrity required",
+      "control_name": "Art. 10 — Data and data governance",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "RAG corpus integrity controls and source verification are Art. 10 requirements"
+    },
+    {
+      "framework": "EU AI Act",
+      "control_id": "High-risk AI accurate and resilient against adversarial data manipulation",
+      "control_name": "Art. 15 — Accuracy, robustness, cybersecurity",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Source trust scoring and ingestion validation are Art. 15 robustness requirements"
+    },
+    {
+      "framework": "EU AI Act",
+      "control_id": "Systemic risk GPAI providers must assess and mitigate risks including disinformation",
+      "control_name": "Art. 55(1)(a) — Systemic risk GPAI",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Disinformation risk assessment and RAG integrity controls are binding Art. 55 obligations"
+    },
+    {
+      "framework": "EU AI Act",
+      "control_id": "AI-generated content that could be mistaken as human must be disclosed",
+      "control_name": "Art. 50 — Transparency",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Disinformation risk amplified when users cannot distinguish AI-generated content — Art. 50 applies"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.5.7",
+      "control_name": "Threat intelligence",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Active intelligence on disinformation campaigns and RAG poisoning techniques targeting your sector"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.8.8",
+      "control_name": "Management of technical vulnerabilities",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Vulnerability management extended to cover data integrity vulnerabilities in RAG pipelines"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.8.27",
+      "control_name": "Secure system architecture",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "RAG pipeline designed with source trust verification and integrity controls"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.8.29",
+      "control_name": "Security testing",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Integrity testing of RAG corpora — anomaly detection, source validation, content verification"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "Data — provenance",
+      "control_name": "A.7.2",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Hardening"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "Data — quality",
+      "control_name": "A.7.3",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Hardening"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "Impact assessment",
+      "control_name": "A.5.2",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Hardening"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "Transparency",
+      "control_name": "A.8.1",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Hardening"
+    },
+    {
+      "framework": "CIS Controls v8.1",
+      "control_id": "CIS 7",
+      "control_name": "7.1 — Vulnerability management",
+      "tier": "Hardening",
+      "scope": "Both"
+    },
+    {
+      "framework": "CIS Controls v8.1",
+      "control_id": "CIS 16",
+      "control_name": "16.11 — Use up-to-date components",
+      "tier": "Hardening",
+      "scope": "Both"
+    },
+    {
+      "framework": "CIS Controls v8.1",
+      "control_id": "CIS 18",
+      "control_name": "18.1 — Penetration testing",
+      "tier": "Hardening",
+      "scope": "Both"
+    },
+    {
+      "framework": "OWASP ASVS 4.0.3",
+      "control_id": "V5 Validation",
+      "control_name": "V5.1.3 — Server-side input validation",
+      "tier": "Hardening",
+      "scope": "Both"
+    },
+    {
+      "framework": "OWASP ASVS 4.0.3",
+      "control_id": "V11 Business Logic",
+      "control_name": "V11.1.4 — Enforce business logic limits",
+      "tier": "Hardening",
+      "scope": "Both"
+    },
+    {
+      "framework": "ISA/IEC 62443",
+      "control_id": "SR 3.3",
+      "control_name": "Software and information integrity",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "OT RAG corpus integrity controls — source allowlisting, hash verification, ingestion gates"
+    },
+    {
+      "framework": "ISA/IEC 62443",
+      "control_id": "SR 3.7",
+      "control_name": "Software and information integrity monitoring",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Continuous OT RAG corpus monitoring — unauthorised modifications detected before reaching operators"
+    },
+    {
+      "framework": "ISA/IEC 62443",
+      "control_id": "SR 6.1",
+      "control_name": "Timely response to events",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "OT RAG poisoning treated as Critical security event — source quarantine, index rebuild, process control assessment"
+    },
+    {
+      "framework": "ISA/IEC 62443",
+      "control_id": "SR 7.6",
+      "control_name": "Denial of service protection",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Poisoned advisory output blast radius contained — process control fallback if advisory system compromised"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Risk assessment",
+      "control_name": "§6.2",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Provenance as OT data quality and audit risk"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "OT security programme",
+      "control_name": "§8.2",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Data lineage as OT governance requirement"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "GV.SC-01",
+      "control_name": "Supply Chain Risk Management",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "RAG data source providers treated as suppliers — content integrity requirements in contracts"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "DE.CM-09",
+      "control_name": "Continuous Monitoring",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "RAG corpus integrity monitored — anomalous content changes, unusual ingestion patterns detected"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "RS.AN-03",
+      "control_name": "Incident Analysis",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "RAG poisoning incidents analysed — affected content identified, operational decisions influenced reviewed"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "PR.DS-01",
+      "control_name": "Data Security",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "RAG corpus content integrity protected — hash-based verification, source trust tiering"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "RAG corpus integrity controls — only accurate, verified content enters the retrieval index",
+      "control_name": "PI1.2 — System inputs complete and accurate",
+      "tier": "Hardening",
+      "scope": "Both"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "LLM outputs derived from poisoned RAG are a processing integrity failure — detection before delivery",
+      "control_name": "PI1.3 — Outputs complete and accurate",
+      "tier": "Hardening",
+      "scope": "Both"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "RAG corpus data source providers assessed — content quality, update process, integrity guarantees",
+      "control_name": "CC9.1 — Vendor risk",
+      "tier": "Hardening",
+      "scope": "Both"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "RAG corpus anomaly detection — unusual content or modifications detected before reaching production",
+      "control_name": "CC7.2 — Anomaly detection",
+      "tier": "Hardening",
+      "scope": "Both"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 6.5.6",
+      "control_name": "Secure system changes",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "RAG corpus updates tested for unexpected content — integrity verification before production indexing"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 12.8",
+      "control_name": "TPSP programme",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "RAG data source providers as TPSPs — content quality and integrity requirements in agreements"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 10.6.1",
+      "control_name": "Audit log review",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "RAG corpus monitoring — anomalous content detected and reviewed as part of Req 10 log analysis"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 11.3.1",
+      "control_name": "Penetration testing",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Adversarial RAG integrity testing for payment advisory systems — false content injection attempts documented"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L2",
+      "control_name": "Data and Model Security (DMS)",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Provenance verification for all fine-tuning corpora — source credibility assessed, integrity verified before ingestion"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L2",
+      "control_name": "AI System Integrity (ASI)",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "AI system integrity testing includes factual accuracy validation — model outputs tested against ground truth before deployment"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L2",
+      "control_name": "Governance and Risk (GOV)",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "Disinformation risk documented in AI risk register — sector-specific severity assessed for healthcare, finance, critical infrastructure"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L3",
+      "control_name": "L3 — Sector-specific",
+      "tier": "Hardening",
+      "scope": "Both",
+      "notes": "For NIS2 essential entities and EU AI Act Annex III deployments — disinformation risk treated as a significant incident category"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "G-PC",
+      "control_name": "Governance / Policy & Compliance",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Policy requiring provenance metadata for all GenAI data"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "D-SR",
+      "control_name": "Design / Security Requirements",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Provenance metadata built into data pipeline requirements"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "O-OM",
+      "control_name": "Operations / Operational Management",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Alert on loss of provenance metadata in data flows"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "V-RT",
+      "control_name": "Verification / Requirements-Driven Testing",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Tests verifying provenance metadata is preserved through pipeline"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "G-SM",
+      "control_name": "Governance / Strategy & Metrics",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Provenance programme included in data governance roadmap"
+    },
+    {
+      "framework": "CWE/CVE",
+      "control_id": "CWE-345",
+      "control_name": "CWE-345",
+      "tier": "Hardening",
+      "scope": "Both",
+      "url": "https://cwe.mitre.org/data/definitions/345.html"
+    },
+    {
+      "framework": "CWE/CVE",
+      "control_id": "CWE-20",
+      "control_name": "CWE-20",
+      "tier": "Hardening",
+      "scope": "Both",
+      "url": "https://cwe.mitre.org/data/definitions/20.html"
+    },
+    {
+      "framework": "MAESTRO",
+      "control_id": "L2",
+      "control_name": "Data Operations",
+      "tier": "Hardening",
+      "scope": "Both"
+    },
+    {
+      "framework": "MAESTRO",
+      "control_id": "L1",
+      "control_name": "Foundation Models",
+      "tier": "Hardening",
+      "scope": "Both"
+    },
+    {
+      "framework": "MAESTRO",
+      "control_id": "L5",
+      "control_name": "Evaluation & Observability",
+      "tier": "Hardening",
+      "scope": "Both"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "A",
+      "control_name": "Data & Privacy domain",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "E",
+      "control_name": "Audit trails and logging",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "Primary DSGAI entries",
+      "control_name": "AIUC-1 Domain",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Status"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "DSGAI02, DSGAI03, DSGAI06, DSGAI07, DSGAI08, DSGAI09, DSGAI14, DSGAI15, DSGAI18, DSGAI21",
+      "control_name": "A — Data & Privacy",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "DSGAI01, DSGAI04, DSGAI05, DSGAI10, DSGAI12, DSGAI16, DSGAI17",
+      "control_name": "B — Security",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "DSGAI05, DSGAI20",
+      "control_name": "C — Safety",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "DSGAI12, DSGAI19",
+      "control_name": "D — Reliability",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "DSGAI02, DSGAI06, DSGAI09, DSGAI13, DSGAI18, DSGAI20, DSGAI21",
+      "control_name": "E — Accountability",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "DSGAI20",
+      "control_name": "F — Society",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "Date",
+      "control_name": "Version",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Change"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "2026-03-27",
+      "control_name": "1.0.0",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Initial release — full mapping DSGAI01–DSGAI21 to AIUC-1"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "Machine credentials used for ingestion operations — no individual attribution",
+      "control_name": "NHI-10 Human Use of NHI",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Enforce machine identity per pipeline component; log with component identity"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "Decommissioned pipeline identities remain in lineage records",
+      "control_name": "NHI-1 Improper Offboarding",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Timely offboarding of pipeline NHIs"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "Lineage system credentials leaked — provenance records can be tampered",
+      "control_name": "NHI-2 Secret Leakage",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Protect lineage system credentials"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "DSGAI entries most affected",
+      "control_name": "NHI Risk",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "DSGAI21",
+      "control_name": "NHI-1 Improper Offboarding",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "DSGAI03, DSGAI06, DSGAI16",
+      "control_name": "NHI-2 Secret Leakage",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "DevSecOps"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "DSGAI13, DSGAI16, DSGAI17",
+      "control_name": "NHI-3 Third-Party NHI",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Security"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "DSGAI04, DSGAI08",
+      "control_name": "NHI-4 Insecure Authentication",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Platform"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "DSGAI02, DSGAI07, DSGAI08, DSGAI09",
+      "control_name": "NHI-5 Over-Privileged NHI",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "DSGAI02, DSGAI09, DSGAI14",
+      "control_name": "NHI-6 Insecure Storage",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Platform"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "DSGAI02, DSGAI07, DSGAI09, DSGAI12",
+      "control_name": "NHI-7 Long-Lived",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "DSGAI16, DSGAI17",
+      "control_name": "NHI-8 Env Isolation",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "DevSecOps"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "DSGAI04, DSGAI07, DSGAI08, DSGAI19",
+      "control_name": "NHI-9 NHI Reuse",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "DSGAI18, DSGAI20, DSGAI21",
+      "control_name": "NHI-10 Human Use",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "Date",
+      "control_name": "Version",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Change"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "2026-03-27",
+      "control_name": "1.0.0",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Initial release — full mapping DSGAI01–DSGAI21 to NHI Top 10"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "PW.1.1-PS",
+      "control_name": "Define security requirements — regulatory compliance requirements",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Define security requirements that mandate compliance with all applicable data protection, privacy, and AI-specific regulations for each AI system deployment"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "PW.2.1-PS",
+      "control_name": "Design software — compliance-by-design",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Design AI systems with regulatory compliance built into architecture; embed compliance controls, audit capabilities, and regulatory reporting into pipeline design"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "RV.3.1-PS",
+      "control_name": "Analyse root causes — compliance failure analysis",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "When regulatory non-compliance is identified, conduct root cause analysis to determine the gap, affected data subjects, and required remediation"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "PM-9",
+      "control_name": "Risk Management Strategy — regulatory compliance",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Include regulatory compliance in AI risk management; map applicable data laws to AI processing activities and define compliance requirements"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "RA-3",
+      "control_name": "Risk Assessment — compliance gap analysis",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Conduct regulatory compliance gap analysis for AI systems; identify areas of non-compliance and define remediation plans"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "AU-2",
+      "control_name": "Event Logging — regulatory evidence",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Maintain comprehensive logs for regulatory compliance evidence; ensure audit trails meet requirements of applicable data laws"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "AC-3",
+      "control_name": "Access Enforcement — legally mandated controls",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Implement access controls mandated by applicable data laws; enforce data subject rights, purpose limitation, and processing restrictions"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 5–7",
+      "control_name": "ICT Risk Management — regulatory compliance governance",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Include regulatory compliance in ICT risk management; map applicable data laws to AI processing activities; define compliance requirements and accountability"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 17–23",
+      "control_name": "ICT Incident Management — compliance incident reporting",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Classify material regulatory non-compliance events as ICT incidents; report to competent authorities per DORA criteria; coordinate with DPO for GDPR notifications"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 13",
+      "control_name": "Learning and Evolving — compliance improvement",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Apply lessons learned from compliance failures; update controls and processes based on regulatory changes, enforcement actions, and incident analysis"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 8",
+      "control_name": "Identification — regulated data mapping",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Map all AI data subject to regulatory requirements; ensure complete coverage in compliance programme"
+    }
+  ],
+  "tools": [
+    {
+      "name": "Great Expectations",
+      "type": "open-source",
+      "url": "https://greatexpectations.io"
+    },
+    {
+      "name": "Deepchecks",
+      "type": "open-source",
+      "url": "https://deepchecks.com"
+    },
+    {
+      "name": "TruLens",
+      "type": "open-source",
+      "url": "https://github.com/truera/trulens"
+    },
+    {
+      "name": "CleanLab",
+      "type": "open-source",
+      "url": "https://github.com/cleanlab/cleanlab"
+    },
+    {
+      "name": "FactScore",
+      "type": "open-source",
+      "url": "https://github.com/shmsw25/FActScoring"
+    },
+    {
+      "name": "Cleanlab",
+      "type": "open-source",
+      "url": "https://github.com/cleanlab/cleanlab"
+    },
+    {
+      "name": "RAGAS",
+      "type": "open-source",
+      "url": "https://github.com/explodinggradients/ragas"
+    },
+    {
+      "name": "OneTrust",
+      "type": "commercial",
+      "url": "https://www.onetrust.com"
+    },
+    {
+      "name": "TrustArc",
+      "type": "commercial",
+      "url": "https://trustarc.com"
+    },
+    {
+      "name": "Open Policy Agent",
+      "type": "open-source",
+      "url": "https://www.openpolicyagent.org"
+    },
+    {
+      "name": "Transcend",
+      "type": "commercial",
+      "url": "https://transcend.io"
+    },
+    {
+      "name": "ServiceNow GRC",
+      "type": "commercial",
+      "url": "https://www.servicenow.com"
+    }
+  ],
+  "incidents": [
+    {
+      "name": "Italy Garante orders ChatGPT GDPR enforcement — consent and data minimization failures",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2025,
+      "incident_id": "INC-035"
+    },
+    {
+      "name": "NYT v OpenAI — copyright training data ruling implications",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2025,
+      "incident_id": "INC-039"
+    },
+    {
+      "name": "TikTok EU data localization enforcement — Project Clover + EUR 345M GDPR fine",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2023,
+      "incident_id": "INC-043"
+    },
+    {
+      "name": "OpenAI ChatGPT data retention GDPR challenge — right to erasure vs model training",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2024,
+      "incident_id": "INC-050"
+    }
+  ],
+  "crossrefs": {
+    "llm_top10": [
+      "LLM04",
+      "LLM09",
+      "LLM06",
+      "LLM07",
+      "LLM02"
+    ],
+    "agentic_top10": [
+      "ASI06",
+      "ASI09",
+      "ASI02"
+    ],
+    "dsgai_2026": [
+      "DSGAI01",
+      "DSGAI03",
+      "DSGAI07",
+      "DSGAI08",
+      "DSGAI02",
+      "DSGAI06",
+      "DSGAI12",
+      "DSGAI13",
+      "DSGAI04",
+      "DSGAI05",
+      "DSGAI11",
+      "DSGAI18",
+      "DSGAI17",
+      "DSGAI14",
+      "DSGAI15",
+      "DSGAI09",
+      "DSGAI16",
+      "DSGAI10",
+      "DSGAI19",
+      "DSGAI20"
+    ]
+  },
+  "changelog": [
+    {
+      "date": "2026-03-27",
+      "version": "1.0.0",
+      "change": "Initial entry — generated from GenAI Security Crosswalk v1.5.1 mapping files",
+      "author": "emmanuelgjr"
+    }
+  ]
+}