Published by ODA3 InstituteGAISSF™ to OWASP LLM Top 10 Crosswalk
ID GAISSF-CRO-024
Framework GAISSF™ Type Crosswalk
Read this first. A crosswalk records a documented correspondence under stated criteria. It does not establish compliance, equivalence, endorsement or certification.
What it coversThis Draft for Publication assesses all 59 GAISSF™ v1.0 controls against the ten OWASP Top 10 for LLM Applications 2025 risk categories. The mapping is edition-bound to the 2025 OWASP list; OWASP released a 2026 edition in August 2026, which is not mapped here.
Use it whenSupport AI application threat modelling and control selection; Identify reusable GAISSF evidence for OWASP-oriented reviews; Expose residual implementation and testing gaps.
Scope and limitsThis document records analytical relationships only. It does not establish OWASP endorsement, certification, equivalence, vulnerability absence, legal compliance, or operating effectiveness.
Edition mappedOWASP Top 10 for LLM Applications 2025 (released 17 November 2024)
Revision history
| Date (as stated) | Event | What changed |
|---|---|---|
| 29 June 2026 | Publication | Published as v1.0Source: Page metadata (/crosswalks/cro-024-owasp-llm-top-10/) |
| 5 October 2026 | Document revision | Draft for Publication issued, public and in full; independent crosswalk review openSource: GAISSF-CRO-024_GAISSF-OWASP-LLM-Top-10-2025-Mapping_v1.0.pdf |
| 7 October 2026 | File correction | OWASP 2026 edition month corrected from September to August 2026 in the crosswalk, website summary and JSON dataset (document date unchanged: "Updated 5 October 2026")Source: GAISSF-CRO-024_GAISSF-OWASP-LLM-Top-10-2025-Mapping_v1.0.pdf |
| 7 October 2026 | File correction | Website summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged)Source: GAISSF-CRO-024_GAISSF-OWASP-LLM-Top-10-2025_Website-Summary_v1.0.pdf |
Website record last updated 7 October 2026. This is the web page, not the document.
More from GAISSF™
| SEC-047 | GAISSF™ Telecommunications Sector Implementation Guide |
| NOR-001 | GAISSF™ Framework Standard |
| NOR-002 | GAISSF™ Executive Summary |
| NOR-003 | GAISSF™ Quick Start Guide |
Cite this document
ODA3 Institute. GAISSF™ to OWASP LLM Top 10 Crosswalk (GAISSF-CRO-024), v1.0. Published 29 June 2026. docs.oda3.org/documents/cro-024/
ODA3 Institute. GAISSF™ to OWASP LLM Top 10 Crosswalk (GAISSF-CRO-024), v1.0. Published 29 June 2026. docs.oda3.org/documents/cro-024/