GAISSF Documentation Center
The public GAISSF v1.0 standards, implementation, reference, crosswalk and sector publication library.
GEL v1.0 Licensing Scenarios Guide
Twelve approved scenarios covering Internal Use, Commercial Use, contractors, training, assessment, software integration, open-source projects and authorized delivery.
ODA3-2026-07-FAQ-LEG-001 · Final Publication v1.0 · Published 30 July 2026
Publication libraries
Standards
Framework Standard, Executive Summary, Quick Start Guide and Control Catalogue.
Browse standards →IMPImplementation
Adoption, engineering, deployment, architecture, operations, evidence and continuous improvement.
Browse implementation →REFReference
Glossary, bibliography, release notes and change history.
Browse reference →CROCrosswalks
Public mappings to standards, regulations and security knowledge bases.
Browse crosswalks →SECSector guidance
Implementation guidance for fifteen sectors.
Browse sectors →DLDownloads
Source publications and approved publication packages.
Browse downloads →CATPublication Catalog
Search the complete public publication register.
Browse →RESResearch Library
Research reports, incident analyses and regulatory intelligence.
Browse →CHTCheat Sheets
Concise practitioner guidance and operational references.
Browse →JSONJSON Schemas
Machine-readable framework resources and release status.
Browse →FAQFrequently Asked Questions
Authoritative public answers on adoption, implementation, assurance, certification and operations.
Browse FAQ →How the documentation works
Normative core
The Framework Standard and Control Catalogue establish canonical requirements.
Implementation layer
Guides translate requirements into practitioner workflows without changing them.
Crosswalk and sector layer
Bounded interpretations do not establish equivalence, compliance or certification.
Schemas and packages
Check version, checksum, release state and profile before operational use.
Publication and access states
| State | Meaning | Action |
|---|---|---|
| Published | Approved public artifact. | Use under applicable GEL terms. |
| Publication candidate | Review gates remain. | Preserve limitations; do not imply finality. |
| Source-bounded | Conclusions limited to named sources. | Preserve source, version and date. |
| Controlled | Authority or restricted programme material. | No public claim without authorization. |
GEL v1.0 control gates
Read, evaluate and implement the published material for your organization’s own Internal Use, and make supportable factual mapping statements subject to GEL v1.0. External professional delivery requires the applicable commercial rights and, where required, ODA3 authorization or empanelment.
Trademark, badge and conformance representations require permission.
Scheme rules, assessor authority and credentials are separately governed.
Embedding or negotiated enterprise rights may require an agreement.
Documentation does not authorize “certified,” “compliant,” “approved,” “endorsed,” assessor or certification-body claims.
GAISSF public inventory status
Reconciled against the supplied register: GAISSF-NOR-001 through GAISSF-SEC-051 are represented across the standards, implementation, crosswalk and sector libraries. CER-052 and later items marked “Not Started” are not presented as completed public publications.
Notably Absent
No public certification scheme rules, assessor authority, mark authorization, certificate register or appeal mechanism is represented as operational here.
UAIF documentation
Incident taxonomy, classification, schema and sector-calibration documentation for UAIF v1.0.
Executive Brief
Purpose, audience and adoption boundary.
TCRTechnical Specification
Normative incident classification and decision logic.
JSONSchema Specification
Machine-readable record and validation model.
CALSector Calibrations
Twenty-four public overviews; operational packages controlled.
GOVGovernance and Licensing
Public instruments and gated programme resources.