AI-IRF / D06
Scoping & Impact Analysis
Operational controls for scoping & impact analysis.
Domain purpose
Operational controls for scoping & impact analysis.
Controls and requirements
D06-CTL-01Affected asset scoping
Establish a repeatable and accountable capability for affected asset scoping during AI security incident handling.
D06-CTL-02User and stakeholder scope
Establish a repeatable and accountable capability for user and stakeholder scope during AI security incident handling.
D06-CTL-03Data exposure analysis
Establish a repeatable and accountable capability for data exposure analysis during AI security incident handling.
D06-CTL-04Propagation analysis
Establish a repeatable and accountable capability for propagation analysis during AI security incident handling.
Implementation use
Determine applicability using the framework scope and system context. Implementation should be proportionate to risk and supported by evidence sufficient to validate the intended outcome.