genai-security-crosswalk 2.0.0

package/data/entries/LLM09.json

@@ -0,0 +1,760 @@
+{
+  "id": "LLM09",
+  "name": "Misinformation",
+  "source_list": "LLM-Top10-2025",
+  "version": "2026-Q1",
+  "severity": "Medium",
+  "aivss_score": null,
+  "audience": [
+    "red-teamer",
+    "security-engineer",
+    "developer",
+    "ml-engineer",
+    "ot-engineer",
+    "ciso",
+    "compliance",
+    "auditor"
+  ],
+  "mappings": [
+    {
+      "framework": "MITRE ATLAS",
+      "control_id": "AML.T0045",
+      "control_name": "Disinformation",
+      "tier": "Foundational",
+      "scope": "Both",
+      "url": "https://atlas.mitre.org/techniques/AML.T0045",
+      "notes": "Using AI-generated content to deliberately spread false information"
+    },
+    {
+      "framework": "MITRE ATLAS",
+      "control_id": "AML.T0047",
+      "control_name": "Influence via Automated Content",
+      "tier": "Foundational",
+      "scope": "Both",
+      "url": "https://atlas.mitre.org/techniques/AML.T0047",
+      "notes": "Generating high-volume automated content to shape perception or overwhelm fact-checking"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "GV-1.7",
+      "control_name": "Policies for trustworthy AI",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Organisational policy on AI-generated content accuracy and human oversight requirements"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "MS-2.6",
+      "control_name": "Testing — output quality",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Accuracy and hallucination testing included in AI evaluation programme"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "MS-4.1",
+      "control_name": "Feedback mechanisms",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Feedback channels for detecting and tracking misinformation in production"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "MG-2.4",
+      "control_name": "Risk response — data",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Procedures for responding to detected misinformation incidents"
+    },
+    {
+      "framework": "EU AI Act",
+      "control_id": "High-risk AI system information must include accuracy metrics and known limitations",
+      "control_name": "Art. 13 — Transparency",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Hallucination rates and accuracy limitations must be disclosed to deployers and users"
+    },
+    {
+      "framework": "EU AI Act",
+      "control_id": "AI-generated content must be marked as such — chatbots must disclose AI nature",
+      "control_name": "Art. 50 — Transparency for certain AI systems",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Mandatory AI disclosure prevents users from treating hallucinated content as authoritative human output"
+    },
+    {
+      "framework": "EU AI Act",
+      "control_id": "Systemic risk GPAI providers must assess and mitigate risks including disinformation",
+      "control_name": "Art. 55(1)(a) — Systemic risk GPAI",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Misinformation risk assessment and mitigation is a binding obligation for systemic risk models"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.8.16",
+      "control_name": "Monitoring activities",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Production monitoring for output accuracy — hallucination rate tracking, anomaly detection on model drift"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.5.7",
+      "control_name": "Threat intelligence",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Intelligence on disinformation campaigns and active manipulation of RAG sources"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.6.3",
+      "control_name": "Information security awareness training",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "User training on LLM output limitations — verification requirements and critical evaluation"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.5.36",
+      "control_name": "Compliance with policies",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Policy on AI-generated content accuracy — disclosure requirements, human verification thresholds"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "A.5.2",
+      "control_name": "Impact assessment",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "AI impact assessment covers misinformation risk — which domains are affected, what is the consequence of incorrect output per stakeholder"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "A.6.2.8",
+      "control_name": "Monitoring of AI systems",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Production monitoring for accuracy degradation — hallucination rates tracked as AIMS operational monitoring"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "A.8.1",
+      "control_name": "Information for interested parties",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Transparency about AI system limitations — users informed of advisory status, accuracy limitations, verification requirements"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "A.9.1",
+      "control_name": "Use of AI systems",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Guidance on appropriate AI system use — domains requiring human verification documented as AIMS use guidance"
+    },
+    {
+      "framework": "CIS Controls v8.1",
+      "control_id": "14.1 Establish security awareness programme",
+      "control_name": "CIS 14 — Security Awareness",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "User training on LLM output limitations — verification requirements and critical evaluation"
+    },
+    {
+      "framework": "CIS Controls v8.1",
+      "control_id": "17.1 Designate personnel for incident response",
+      "control_name": "CIS 17 — Incident Response",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Defined response for LLM misinformation incidents — correction, notification, root cause"
+    },
+    {
+      "framework": "CIS Controls v8.1",
+      "control_id": "3.1 Establish data management process",
+      "control_name": "CIS 3 — Data Protection",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "RAG data governance — quality and freshness controls on retrieval sources"
+    },
+    {
+      "framework": "OWASP ASVS 4.0.3",
+      "control_id": "V11.1.1",
+      "control_name": "Verify business logic assumptions documented",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM accuracy limitations documented as business logic assumptions — verification requirements defined"
+    },
+    {
+      "framework": "OWASP ASVS 4.0.3",
+      "control_id": "V7.4.1",
+      "control_name": "Verify all security controls logged",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM accuracy metrics and hallucination rate logged — production monitoring for output quality"
+    },
+    {
+      "framework": "OWASP ASVS 4.0.3",
+      "control_id": "V5.2.1",
+      "control_name": "Verify outputs encoded before rendering",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM advisory outputs clearly labelled — users cannot mistake model output for authoritative source"
+    },
+    {
+      "framework": "ISA/IEC 62443",
+      "control_id": "SR 3.1",
+      "control_name": "Software and information integrity",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM outputs for safety-relevant guidance cross-validated against authoritative sources"
+    },
+    {
+      "framework": "ISA/IEC 62443",
+      "control_id": "SR 6.2",
+      "control_name": "Timely response to events",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Procedures for detecting and responding to LLM misinformation incidents"
+    },
+    {
+      "framework": "ISA/IEC 62443",
+      "control_id": "SR 2.3",
+      "control_name": "Use control",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM advisory outputs clearly distinguished from authoritative procedural documentation"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Attacks degrading the reliability of OT decision-support",
+      "control_name": "Section 5.3 — Integrity threats",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM misinformation as an integrity attack on operator decision-making"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Assess reliability of OT advisory systems",
+      "control_name": "Section 6.2 — Risk assessment",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM accuracy limitations assessed in OT risk assessment per use case"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "OT security awareness and training",
+      "control_name": "Section 8.2 — Training",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Operator training on LLM limitations and verification requirements"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Title",
+      "control_name": "Control",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Application"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Malicious Code Protection",
+      "control_name": "SI-3",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Analogy: LLM misinformation detection controls as an integrity assurance layer on advisory outputs"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Access Enforcement",
+      "control_name": "AC-3",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM advisory outputs restricted to defined advisory roles — never authoritative source for safety-critical procedures"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Role-Based Training",
+      "control_name": "AT-3",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Operator training on LLM advisory limitations — mandatory for all operators using LLM decision-support tools"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "GV.OC-01",
+      "control_name": "Organisational Context",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Acceptable use policy defines which LLM outputs require verification — high-stakes domains identified"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "DE.CM-09",
+      "control_name": "Continuous Monitoring",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Production monitoring for accuracy degradation — hallucination rates tracked per domain"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "ID.RA-01",
+      "control_name": "Risk Assessment",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM misinformation risk assessed per use case — what decisions are influenced, what is the consequence"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "PR.AT-01",
+      "control_name": "Awareness and Training",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Users trained on LLM output limitations — verification requirements for each use case"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "Policy on LLM output accuracy — acceptable accuracy thresholds, verification requirements for high-stakes use cases",
+      "control_name": "PI1.1 — Processing integrity policy",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "LLM inputs (RAG sources, training data) quality controls — authoritative, current, verified sources",
+      "control_name": "PI1.2 — System inputs are complete and accurate",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "Misinformation risk identified in LLM risk assessment — harm potential of incorrect outputs per use case",
+      "control_name": "CC3.2 — Risk assessment",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "Production monitoring for accuracy degradation and hallucination patterns — drift detection",
+      "control_name": "CC7.2 — Anomaly detection",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 12.3.2",
+      "control_name": "Targeted risk analysis",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Targeted risk analysis for LLM advisory outputs in payment context — what decisions are influenced, what is the consequence of incorrect output"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 6.2",
+      "control_name": "Bespoke software security",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM integration code specifies accuracy requirements — high-stakes payment outputs require verification before action"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 10.6.1",
+      "control_name": "Audit log review",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Monitoring for LLM accuracy degradation — output quality metrics reviewed"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 12.6.1",
+      "control_name": "Security awareness programme",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "PCI staff trained on LLM output limitations — advisory status of AI recommendations communicated"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L2",
+      "control_name": "Governance and Risk (GOV)",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Acceptable accuracy thresholds defined per use case — domains requiring human verification documented in AI governance"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L2",
+      "control_name": "AI System Integrity (ASI)",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Production accuracy monitoring as ASI practice — hallucination rates tracked per domain, drift detected"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L2",
+      "control_name": "Monitoring and Detection (MON)",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Accuracy degradation monitoring — ENISA L2 monitoring covering AI-specific failure modes"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L1",
+      "control_name": "General ICT — Awareness",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Users of LLM decision-support tools trained on output limitations — ENISA awareness practice"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "G-EG",
+      "control_name": "Education & Guidance",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "All users of LLM decision-support tools trained on output limitations — SAMM awareness practice applied to AI limitations"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "D-SR",
+      "control_name": "Security Requirements",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Accuracy thresholds as security requirements — domains requiring verification documented before development"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "V-RT",
+      "control_name": "Requirements-Driven Testing",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Accuracy requirements verified in testing — hallucination rates measured against thresholds per domain"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "Monitoring",
+      "control_name": "Operational Management (O-OM)",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Production accuracy monitoring as operational management — drift detection, degradation alerted"
+    },
+    {
+      "framework": "STRIDE",
+      "control_id": "T",
+      "control_name": "Output Tampering via Hallucination",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "STRIDE",
+      "control_id": "R",
+      "control_name": "Hallucination Repudiation",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "CWE/CVE",
+      "control_id": "CWE-1021",
+      "control_name": "CWE-1021",
+      "tier": "Foundational",
+      "scope": "Both",
+      "url": "https://cwe.mitre.org/data/definitions/1021.html"
+    },
+    {
+      "framework": "CWE/CVE",
+      "control_id": "CWE-116",
+      "control_name": "CWE-116",
+      "tier": "Foundational",
+      "scope": "Both",
+      "url": "https://cwe.mitre.org/data/definitions/116.html"
+    },
+    {
+      "framework": "OWASP AI Testing Guide",
+      "control_id": "Factual accuracy and hallucination rate",
+      "control_name": "MBT — Model Behaviour",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Test model outputs against known-correct facts across the deployment use case domain; measure hallucination rate against benchmark ground truth"
+    },
+    {
+      "framework": "OWASP AI Testing Guide",
+      "control_id": "Citation verifiability",
+      "control_name": "OHT — Output Handling",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Verify that citations generated by the LLM are real and accurately represent source content; test that outputs requiring citations enforce this"
+    },
+    {
+      "framework": "OWASP AI Testing Guide",
+      "control_id": "Misinformation incident detection",
+      "control_name": "LMT — Logging & Monitoring",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Verify that the monitoring pipeline can detect and flag systematic misinformation patterns — accuracy drift, citation fabrication rate"
+    },
+    {
+      "framework": "MAESTRO",
+      "control_id": "L1",
+      "control_name": "Foundation Models",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "MAESTRO",
+      "control_id": "L2",
+      "control_name": "Data Operations",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "MAESTRO",
+      "control_id": "L5",
+      "control_name": "Evaluation & Observability",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "C",
+      "control_name": "Safety domain (harm prevention)",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "F",
+      "control_name": "Society domain",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "B009",
+      "control_name": "Validate AI-generated content",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "E",
+      "control_name": "Accountability domain",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "Audit log service credentials leaked or compromised",
+      "control_name": "NHI-2 Secret Leakage",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Protect audit log credentials as sensitive NHI"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "Humans using LLM service account credentials — no attribution",
+      "control_name": "NHI-10 Human Use of NHI",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Enforce separate human and machine credentials"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "PW.7.2-PS",
+      "control_name": "Review for security vulnerabilities — output validation",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Include accuracy, hallucination, and misinformation scenarios in pre-release model behaviour reviews; validate output quality against domain benchmarks"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "PW.8.2-PS",
+      "control_name": "Test for security vulnerabilities — behavioural and accuracy testing",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Conduct adversarial and behavioural testing covering hallucination rates, factual accuracy, and misinformation generation potential before each release"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "RV.1.1-PS",
+      "control_name": "Identify and confirm vulnerabilities — emergent behaviour monitoring",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Establish procedures to detect and triage misinformation incidents in production including user feedback channels, automated fact-checking, and output monitoring"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "PW.2.1-PS",
+      "control_name": "Design software — output confidence and citation requirements",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Design AI systems to surface confidence indicators, source citations, and uncertainty signals in output; include as explicit security and quality requirements"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "SI-4",
+      "control_name": "System Monitoring — output quality monitoring",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Monitor model outputs for factual accuracy, consistency, and hallucination indicators; alert when confidence scores or factual grounding drops below thresholds"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "CA-7",
+      "control_name": "Continuous Monitoring — model drift detection",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Include model output quality and drift monitoring in FedRAMP continuous monitoring programme; track accuracy metrics, hallucination rates, and output consistency over time"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "AU-6",
+      "control_name": "Audit Review — AI behaviour review",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Regularly review AI inference logs and output samples for hallucination patterns, factual errors, and misleading content; escalate findings through security channels"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "SI-10",
+      "control_name": "Information Input Validation — grounding and retrieval validation",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Validate retrieval sources and grounding data provided to the model; ensure factual grounding sources are authoritative and current"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 10",
+      "control_name": "Detection — output quality monitoring",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Deploy detection mechanisms for AI output quality degradation — hallucinations, factual errors, and misleading content in financial AI outputs"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 5–7",
+      "control_name": "ICT Risk Management — AI reliability governance",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Include AI output reliability in the ICT risk management framework; define acceptable accuracy thresholds for financial AI use cases"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 13",
+      "control_name": "Learning and Evolving — misinformation post-mortem",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Conduct post-incident analysis for misinformation events; identify root cause, assess customer and regulatory impact, and update controls"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 9",
+      "control_name": "Protection and Prevention — grounding controls",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Implement factual grounding controls for financial AI outputs — RAG with authoritative sources, confidence scoring, and human review for high-stakes outputs"
+    }
+  ],
+  "tools": [
+    {
+      "name": "TruLens",
+      "type": "open-source",
+      "url": "https://github.com/truera/trulens"
+    },
+    {
+      "name": "RAGAS",
+      "type": "open-source",
+      "url": "https://github.com/explodinggradients/ragas"
+    },
+    {
+      "name": "DeepEval",
+      "type": "open-source",
+      "url": "https://github.com/confident-ai/deepeval"
+    },
+    {
+      "name": "Evals (OpenAI)",
+      "type": "open-source",
+      "url": "https://github.com/openai/evals"
+    },
+    {
+      "name": "Ragas",
+      "type": "open-source",
+      "url": "https://github.com/explodinggradients/ragas"
+    },
+    {
+      "name": "LangSmith",
+      "type": "commercial",
+      "url": "https://smith.langchain.com"
+    },
+    {
+      "name": "Evidently",
+      "url": "https://github.com/evidentlyai/evidently",
+      "type": "open-source"
+    }
+  ],
+  "incidents": [
+    {
+      "name": "Bing Chat 'Sydney' jailbreak — persona escape and threatening behaviour",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2023,
+      "incident_id": "INC-002"
+    },
+    {
+      "name": "Air Canada chatbot invents bereavement discount policy — tribunal ruling",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2024,
+      "incident_id": "INC-004"
+    },
+    {
+      "name": "Clarkesworld magazine overwhelmed by AI-generated fiction submissions",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2023,
+      "incident_id": "INC-014"
+    },
+    {
+      "name": "AI voice deepfake CEO fraud — Hong Kong $25M loss",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2024,
+      "incident_id": "INC-026"
+    },
+    {
+      "name": "Meta Galactica model withdrawn after misinformation at launch",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2022,
+      "incident_id": "INC-031"
+    },
+    {
+      "name": "OpenAI o1/o3 reasoning chain jailbreak via chain-of-thought manipulation",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2025,
+      "incident_id": "INC-033"
+    },
+    {
+      "name": "AI companion apps: manipulation and exploitation of human-agent trust",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2025,
+      "incident_id": "INC-048"
+    }
+  ],
+  "crossrefs": {
+    "agentic_top10": [
+      "ASI09"
+    ],
+    "dsgai_2026": [
+      "DSGAI21",
+      "DSGAI10",
+      "DSGAI17"
+    ]
+  },
+  "changelog": [
+    {
+      "date": "2026-03-27",
+      "version": "1.0.0",
+      "change": "Initial entry — generated from GenAI Security Crosswalk v1.5.1 mapping files",
+      "author": "emmanuelgjr"
+    }
+  ]
+}