Main site ↗

Docs / Release notes

Release notes

Each framework is at v1.0. Individual documents carry their own version numbers, set under the Versioning Policy (MTH-GOV-036). Every change is recorded here as a dated note. Follow new entries by RSS.

Release notes, newest first. Select a column heading to sort.
What changed
29 Oct 2026COM-015 · Building an AI Assurance Evidence Pack — A Practitioner’s Field Guide to Defensible Evidence PreparationCorrectionReferences to the withdrawn COM-016 removed; COM-017 shown as published; layout aligned to the ODA3 Document Formatting Standard; Document Control date corrected to 15 August 2026 to match the cover.
28 Oct 2026COM-020 · How to Assess an AI SystemDocument revisionPublic Version 1.1: licence, copyright and GEL attribution added; §21.1 added (cited in v1.0 but missing); §5 renamed; production notes removed; method otherwise unchanged.
7 Oct 2026CRO-021 · GAISSF™ to ISO/IEC 23894 CrosswalkFile correctionSection 6: "Certification-grade evidence" changed to "Assessment evidence", matching GAISSF-NOR-001 section 6 (document date unchanged: "Updated 5 October 2026").
7 Oct 2026CRO-022 · GAISSF™ to NIST AI RMF CrosswalkFile correctionWebsite summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged).
7 Oct 2026CRO-023 · GAISSF™ to NIST CSF 2.0 CrosswalkFile correctionWebsite summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged).
7 Oct 2026CRO-024 · GAISSF™ to OWASP LLM Top 10 CrosswalkFile correctionOWASP 2026 edition month corrected from September to August 2026 in the crosswalk, website summary and JSON dataset (document date unchanged: "Updated 5 October 2026"). Website summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged).
7 Oct 2026CRO-027 · GAISSF™ to EU AI Act CrosswalkFile correctionMapping register: GAISSF-NOR-001 and NOR-004 relabelled "Published normative source" (were "Internal controlled source"). Website summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged).
7 Oct 2026CRO-028 · GAISSF™ to DORA CrosswalkFile correctionMapping register: GAISSF-NOR-001 and NOR-004 relabelled "Published normative source" (were "Internal controlled source").
7 Oct 2026CRO-029 · GAISSF™ to NIS2 CrosswalkFile correctionWebsite summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged).
7 Oct 2026CRO-030 · GAISSF™ to GDPR CrosswalkFile correctionMapping register: GAISSF-NOR-001 and NOR-004 relabelled "Published normative source" (were "Internal controlled source"). Website summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged).
7 Oct 2026CRO-031 · GAISSF™ to SOC 2 CrosswalkFile correctionWebsite summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged).
7 Oct 2026CRO-032 · GAISSF™ to PCI DSS CrosswalkDocument revision; File correctionDraft for Publication issued, public and in full; maps PCI DSS v4.0.1 (verification date 29 June 2026); independent crosswalk review open. Website summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged).
7 Oct 2026CRO-033 · GAISSF™ to CIS Controls CrosswalkFile correctionWebsite summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged).
7 Oct 2026CRO-034 · GAISSF™ to CSA CCM CrosswalkFile correctionWebsite summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged).
7 Oct 2026CRO-036 · GAISSF™ to FedRAMP CrosswalkFile correctionMapping register: GAISSF-NOR-001 and NOR-004 relabelled "Published normative source" (were "Internal controlled source"). Website summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged).
7 Oct 2026MTH-GOV-036 · GAISSF™ Ecosystem Versioning PolicyFile correctionCover version corrected to v1.2, matching the file name and revision table (document date unchanged: "Updated 06 October 2026").
7 Oct 2026NOR-006 · GAISSF™ BibliographyDocument revisionInternal reference GAISSF-REF-INT-006 removed; no other reference identifiers changed.
7 Oct 2026RPT-SCS-024 · AI-IRF™ Financial Services Sector NoteFile correction"AI IRF CERT™" removed from the trademark notice; Notably Absent now states that certification is not currently offered (regenerated from the source document, so the old wording is gone from the text layer as well; document date unchanged: "updated 04 October 2026").
7 Oct 2026RPT-SCS-025 · AI-IRF™ Healthcare Sector NoteFile correction"AI IRF CERT™" removed from the trademark notice; Notably Absent now states that certification is not currently offered (regenerated from the source document, so the old wording is gone from the text layer as well; document date unchanged: "updated 04 October 2026").
7 Oct 2026RPT-SCS-026 · AI-IRF™ Critical Infrastructure Sector NoteFile correction"AI IRF CERT™" removed from the trademark notice; Notably Absent now states that certification is not currently offered (regenerated from the source document, so the old wording is gone from the text layer as well; document date unchanged: "updated 04 October 2026").
7 Oct 2026SEC-043 · GAISSF™ Education Sector Implementation GuideDocument revisionDraft for Publication issued; cover reissued as text with the Draft for Publication status.
6 Oct 2026CRO-025 · GAISSF™ to MITRE ATLAS CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
6 Oct 2026CRO-026 · GAISSF™ to MITRE ATT&CK CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
6 Oct 2026CRO-027 · GAISSF™ to EU AI Act CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
6 Oct 2026CRO-028 · GAISSF™ to DORA CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
6 Oct 2026CRO-029 · GAISSF™ to NIS2 CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
6 Oct 2026CRO-030 · GAISSF™ to GDPR CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
6 Oct 2026CRO-031 · GAISSF™ to SOC 2 CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
6 Oct 2026CRO-033 · GAISSF™ to CIS Controls CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
6 Oct 2026CRO-034 · GAISSF™ to CSA CCM CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
6 Oct 2026CRO-035 · GAISSF™ to HIPAA CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
6 Oct 2026CRO-036 · GAISSF™ to FedRAMP CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
6 Oct 2026MTH-GOV-036 · GAISSF™ Ecosystem Versioning PolicyDocument revisionv1.2: removed the implication of an active certification programme and public VTS version references.
6 Oct 2026SEC-037 · GAISSF™ Healthcare Sector Implementation GuideDocument revisionDraft for Publication issued; external review open.
6 Oct 2026SEC-038 · GAISSF™ Financial Services Sector Implementation GuideDocument revisionDraft for Publication issued; external review open.
6 Oct 2026SEC-044 · GAISSF™ Energy Sector Implementation GuideDocument revisionDraft for Publication issued; external review open.
6 Oct 2026SEC-047 · GAISSF™ Telecommunications Sector Implementation GuideDocument revisionDraft for Publication issued; external review open.
6 Oct 2026SEC-048 · GAISSF™ Legal Sector Implementation GuideDocument revisionDraft for Publication issued; external review open.
6 Oct 2026SEC-050 · GAISSF™ Aerospace Sector Implementation GuideDocument revisionDraft for Publication issued; external review open.
5 Oct 2026CRO-019 · GAISSF™ to ISO/IEC 42001 CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
5 Oct 2026CRO-020 · GAISSF™ to ISO/IEC 27001 CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
5 Oct 2026CRO-021 · GAISSF™ to ISO/IEC 23894 CrosswalkDocument revisionv1.2 Draft for Publication, source-bounded: structure confirmed from the ISO record and authorised preview; semantic mappings pending licensed full-text review.
5 Oct 2026CRO-022 · GAISSF™ to NIST AI RMF CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
5 Oct 2026CRO-023 · GAISSF™ to NIST CSF 2.0 CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
5 Oct 2026CRO-024 · GAISSF™ to OWASP LLM Top 10 CrosswalkDocument revisionDraft for Publication issued, public and in full; independent crosswalk review open.
5 Oct 2026IMP-009 · GAISSF™ Adoption GuideDocument revisionUpdated edition: GEL v1.0 licence notice added; ® marks removed; the document does not record its other changes.
5 Oct 2026IMP-010 · GAISSF™ Implementation HandbookDocument revisionUpdated edition: GEL v1.0 licence notice added; ® marks removed; the document does not record its other changes.
5 Oct 2026IMP-011 · GAISSF™ Deployment PlaybookDocument revisionUpdated edition: GEL v1.0 licence notice added; ® marks removed; the document does not record its other changes.
5 Oct 2026IMP-012 · GAISSF™ Migration GuideDocument revisionUpdated edition: GEL v1.0 licence notice added; ® marks removed; the document does not record its other changes.
5 Oct 2026IMP-013 · GAISSF™ Reference ArchitectureDocument revisionUpdated edition: GEL v1.0 licence notice added; ® marks removed; the document does not record its other changes.
5 Oct 2026IMP-014 · GAISSF™ Operational HandbookDocument revisionUpdated edition: GEL v1.0 licence notice added; ® marks removed; the document does not record its other changes.
5 Oct 2026IMP-015 · GAISSF™ Frequently Asked QuestionsDocument revisionUpdated edition: GEL v1.0 licence notice added; ® marks removed; the document does not record its other changes.
5 Oct 2026IMP-016 · GAISSF™ Troubleshooting GuideDocument revisionUpdated edition: GEL v1.0 licence notice added; ® marks removed; the document does not record its other changes.
5 Oct 2026IMP-017 · GAISSF™ Evidence Collection GuideDocument revisionUpdated edition: GEL v1.0 licence notice added; ® marks removed; the document does not record its other changes.
5 Oct 2026IMP-018 · GAISSF™ Continuous Improvement GuideDocument revisionUpdated edition: GEL v1.0 licence notice added; ® marks removed; the document does not record its other changes.
5 Oct 2026SEC-039 · GAISSF™ Insurance Sector Implementation GuideDocument revisionDraft for Publication issued; status corrected from controlled pre-release; open review gates stated.
5 Oct 2026SEC-040 · GAISSF™ Defence Sector Implementation GuideDocument revisionDraft for Publication issued; external review open.
5 Oct 2026SEC-041 · GAISSF™ Government Sector Implementation GuidanceDocument revisionDraft for Publication issued; external review open.
5 Oct 2026SEC-042 · GAISSF™ Critical Infrastructure Sector Implementation GuideDocument revisionDraft for Publication issued; status corrected from controlled pre-release; UAIF™ mark corrected.
5 Oct 2026SEC-045 · GAISSF™ Manufacturing Sector Implementation GuideDocument revisionDraft for Publication issued; external review open.
5 Oct 2026SEC-046 · GAISSF™ Retail Sector Implementation GuideDocument revisionDraft for Publication issued; external review open.
5 Oct 2026SEC-049 · GAISSF™ Pharmaceutical Sector Implementation GuideDocument revisionDraft for Publication issued; UAIF™ mark corrected.
5 Oct 2026SEC-049A · GAISSF™ Pharmaceutical Sector Executive PrimerDocument revisionDraft for Publication issued; external review open.
5 Oct 2026SEC-051 · GAISSF™ Automotive Sector Implementation GuideDocument revisionDraft for Publication issued; external review open.
4 Oct 2026CHT-UAIF-083 · UAIF™ Classification Cheat SheetDocument revisionRegenerated against the canonical schema uaif-core-v1.0.json (SHA-256 55056e7c…); Observation and severity_justification removed; profile and extensions added.
4 Oct 2026CHT-UAIF-084 · UAIF™ Severity Cheat SheetDocument revisionRegenerated against the canonical schema uaif-core-v1.0.json (SHA-256 55056e7c…); Observation and severity_justification removed; profile and extensions added.
4 Oct 2026CSX-PAISF-004 · GAISSF™ Domain 9 to PAI-SF™ Control CrosswalkFile correctionReissued file states "updated 04 October 2026"; text otherwise identical to the 02 October 2026 reissue (word-level comparison).
4 Oct 2026EXB-PAISF-001 · PAI-SF™ Physical AI Security Framework Executive BriefFile correctionReissued file states "updated 04 October 2026"; text otherwise identical to the 02 October 2026 reissue (word-level comparison).
4 Oct 2026EXB-STD-001 · UAIF™ Executive BriefDocument revisionStatus corrected from "publication candidate" to Final Publication.
4 Oct 2026IMP-UAIF-037 · UAIF™ Implementation GuideDocument revisionRegenerated against the canonical schema uaif-core-v1.0.json (SHA-256 55056e7c…); Observation and severity_justification removed; profile and extensions added.
4 Oct 2026IMP-UAIF-043 · UAIF™ Incident Reporting TemplateDocument revisionRegenerated against the canonical schema uaif-core-v1.0.json (SHA-256 55056e7c…); Observation and severity_justification removed; profile and extensions added.
4 Oct 2026NOR-001 · GAISSF™ Framework StandardDocument revisionReconciled name and mark treatment, conformance and assessment wording, D9 applicability and VTS release-state boundaries; removed per-control legal and insurance mappings. Version remains 1.0.
4 Oct 2026NOR-002 · GAISSF™ Executive SummaryDocument revisionReconciled to NOR-001: name and mark treatment, conformance terms and source references corrected; certification boundary stated. No normative requirement changed.
4 Oct 2026NOR-003 · GAISSF™ Quick Start GuideDocument revisionReconciled to NOR-001: D9 made applicability-driven at Operational and Optimized tiers; "certification readiness" changed to "independent-assessment readiness"; Quick-Start sequence updated.
4 Oct 2026NOR-004 · GAISSF™ Control CatalogueDocument revisionReconciled to NOR-001: D9 applicability corrected; per-control Compliance and Insurance rows and package-specific commands removed; retention wording normalised. No new normative requirement.
4 Oct 2026NOR-005 · GAISSF™ GlossaryDocument revisionReconciled to NOR-001 to 004: D9 applicability corrected; certification terms marked as future-scheme terms; GEL expansion and NOR-001/NOR-004 precedence corrected.
4 Oct 2026NOR-006 · GAISSF™ BibliographyDocument revisionISO/IEC 27701, NIST SP 800-61 and SP 800-88 updated to current editions; EO 14110 marked historical (revoked); OSCAL treated as an external reference only; GAISSF VTS marked as a draft, not released.
4 Oct 2026NOR-007 · GAISSF™ Release NotesDocument revisionReconciled to NOR-001 to 006: D9 applicability corrected; no-certification boundary made explicit; migration and verification wording changed; 1.0 kept with an update date instead of a patch version.
4 Oct 2026NOR-008 · GAISSF™ Change LogDocument revisionReconciled to NOR-001 to 007: applicability wording corrected; nine-control Quick-Start concept removed from conformance; supersession logic and corrective-action statuses updated.
4 Oct 2026REL-UAIF-001 · UAIF™ v1.0 Release NotesDocument revisionDocument ID added; errata ERR-UAIF-001 entry added.
4 Oct 2026RPT-SCS-024 · AI-IRF™ Financial Services Sector NoteDocument revisionReworked as a regulatory-mapping note: certification pathway, audit-day and certificate-use content removed; mapping boundary added.
4 Oct 2026RPT-SCS-025 · AI-IRF™ Healthcare Sector NoteDocument revisionReworked as a regulatory-mapping note: certification pathway, audit-day and certificate-use content removed; mapping boundary added.
4 Oct 2026RPT-SCS-026 · AI-IRF™ Critical Infrastructure Sector NoteDocument revisionReworked as a regulatory-mapping note: certification pathway, audit-day and certificate-use content removed; mapping boundary added.
4 Oct 2026TCR-HAI-001 · AI-IRF™ Technical ReportDocument revisionSource-verification, control-integrity and editorial correction issued: SAI-5 and MLC-5 placed in their domain tables (79 controls stated); Phase 0 references the SAI controls; validation methods corrected; no control IDs added or removed.
4 Oct 2026TCR-UAIF-014 · UAIF™ Data DictionaryDocument revisionRegenerated against the canonical schema uaif-core-v1.0.json (SHA-256 55056e7c…); Observation and severity_justification removed; profile and extensions added.
4 Oct 2026TCR-UAIF-015 · UAIF™ Validation Rules CatalogueDocument revisionRegenerated against the canonical schema uaif-core-v1.0.json (SHA-256 55056e7c…); Observation and severity_justification removed; profile and extensions added.
4 Oct 2026TCR-UAIF-018 · UAIF™ Reference Incident RecordsDocument revisionRegenerated against the canonical schema uaif-core-v1.0.json (SHA-256 55056e7c…); Observation and severity_justification removed; profile and extensions added.
4 Oct 2026TCR-UAIF-020 · UAIF™ Change LogDocument revisionErrata ERR-UAIF-001 entry added; NOR-UAIF-013 citations removed; classification Public.
4 Oct 2026UAIF-DCA-004 · UAIF™ Data Contribution AgreementDocument revisionSupplied as PDF (previously Apple Pages only).
4 Oct 2026UAIF-DPR-007 · UAIF™ Defensive Publication TemplateDocument revisionTrademarks shown with ™; conformance URL removed.
4 Oct 2026UAIF-IP-001 · UAIF™ Intellectual Property PolicyDocument revisionv1.1: corrected governance hierarchy; ODA3-owned and contributed copyright distinguished; hard-coded trademark-status claims and legacy certification-programme material removed (certification stated as not currently offered); GDPR anonymisation framing corrected; defensive publication separated from patent non-assertion; third-party patent boundary, continuity, dispute-resolution and Notably Absent added.
4 Oct 2026WHP-STD-004 · UAIF™ Licensing ModelDocument revisionCorrected edition: conformance suite shown as planned; no conformance URL.
2 Oct 2026CSX-PAISF-004 · GAISSF™ Domain 9 to PAI-SF™ Control CrosswalkDocument revisionReissued as Public; framed as an implementer mapping without declaring supersession of GAISSF™ Domain 9; internal production notes removed. Mapping content unchanged.
2 Oct 2026EXB-PAISF-001 · PAI-SF™ Physical AI Security Framework Executive BriefDocument revisionDocument control updated to published status; review cycle set to every 6 months. Content unchanged.
2 Oct 2026TCR-HAI-001 · AI-IRF™ Technical ReportDocument revisionSource-verification and editorial correction issued: Public classification; corrected evidence sources and standards crosswalk.
20 Aug 2026COM-019 · The AI System Owner’s Guide to Operational AssuranceDocument revisionCorrected edition.
19 Aug 2026COM-018 · The CISO’s Guide to AI Security AssuranceDocument revisionCorrected edition (supersedes the 13 August 2026 edition): public references to the withdrawn COM-016 removed.
18 Aug 2026COM-017 · Implementing GAISSF™Document revisionCorrection Date: 18 August 2026.
14 Aug 2026ERR-UAIF-001 · Normative Errata: UAIF™ v1.0 TCR-STD-002 / TCR-STD-003Content finalizedClosure date: errata closed and integrated into UAIF™ v1.0 Final Publication.
14 Aug 2026RPT-STD-005 · UAIF™ v1.0 Final Readiness and Normative Conformance ReportContent finalizedReport updated after closure of errata ERR-UAIF-001.
1 Aug 2026CAT-PAISF-006 · PAI-SF™ Control CatalogueContent finalizedContent finalized before publication.
1 Aug 2026CSX-PAISF-004 · GAISSF™ Domain 9 to PAI-SF™ Control CrosswalkContent finalizedContent finalized; GAISSF™ Domain 9 control names (D9-CTL-01 to D9-CTL-07) verified against the GAISSF™ v1.0 publication text.
1 Aug 2026EXS-PAISF-007 · PAI-SF™ Executive SummaryContent finalizedContent finalized before publication.
1 Aug 2026NOR-PAISF-005 · PAI-SF™ Physical AI Security Framework StandardContent finalizedContent finalized before publication.
1 Aug 2026QSG-PAISF-008 · PAI-SF™ Quick Start GuideContent finalizedContent finalized before publication.
19 Jul 2026TCR-HAI-001 · AI-IRF™ Technical ReportDocument revisionRegulatory correction issued.
19 Jul 2026TCR-HAI-003 · AI-IRF™ AIIS Implementation SchemaDocument revisionCorrection issued: audience and schema descriptions no longer refer to Certification Bodies; trademark notice corrected; ™ replaces ®.