Downloads Center
Direct access to approved public framework documents, crosswalk packages and sector guidance packages.
GEL v1.0 Licensing Scenarios Guide
Twelve approved scenarios covering Internal Use, Commercial Use, contractors, training, assessment, software integration, open-source projects and authorized delivery.
ODA3-2026-07-FAQ-LEG-001 · Final Publication v1.0 · Published 30 July 2026
Latest Insights downloads
Download ODA3-2026-07-INS-078 Gold Release PDF · Operational Assurance Implications of Modern AI Interoperability Protocols.
Legal guidance
- ODA3-2026-07-FAQ-LEG-001 — GEL v1.0 Licensing Scenarios GuidePDF · Final Publication v1.0 · 7 pages
- ODA3-2026-07-FAQ-LEG-001 — GEL v1.0 Licensing Scenarios GuideDOCX · Final Publication v1.0
Approved public downloads
This center provides direct access to the public source documents and publication packages included in the current portal build. Package status and version remain governed by the source documents.
Standards & reference
- NOR-001 — Framework StandardDOCX · 75 KB
- NOR-002 — Executive SummaryDOCX · 45 KB
- NOR-003 — Quick Start GuideDOCX · 47 KB
- NOR-004 — Control CatalogueDOCX · 73 KB
- NOR-005 — GlossaryDOCX · 52 KB
- NOR-006 — BibliographyDOCX · 49 KB
- NOR-007 — Release NotesDOCX · 44 KB
- NOR-008 — Change LogDOCX · 47 KB
Implementation
- IMP-009 — Adoption GuideDOCX · 54 KB
- IMP-010 — Implementation HandbookDOCX · 53 KB
- IMP-011 — Deployment PlaybookDOCX · 54 KB
- IMP-013 — Reference ArchitectureDOCX · 55 KB
- IMP-014 — Operational HandbookDOCX · 55 KB
- IMP-015 — FAQDOCX · 53 KB
- IMP-016 — Troubleshooting GuideDOCX · 58 KB
- IMP-017 — Evidence Collection GuideDOCX · 56 KB
- IMP-018 — Continuous Improvement GuideDOCX · 54 KB
Crosswalks
- CRO-022 — NIST AI RMF MappingPDF · 1.2 MB
- CRO-022 — NIST AI RMF MappingMD · 368 KB
- CRO-022 — NIST AI RMF Website SummaryDOCX · 37 KB
- CRO-023 — NIST CSF 2.0 MappingPDF · 1.2 MB
- CRO-023 — NIST CSF 2.0 MappingMD · 19 KB
- CRO-023 — NIST CSF 2.0 Website SummaryPDF · 0.1 MB
- CRO-024 — OWASP LLM Top 10 MappingPDF · 0.4 MB
- CRO-024 — OWASP LLM Top 10 MappingMD · 2 KB
- CRO-024 — OWASP LLM Top 10 Website SummaryPDF · 0.1 MB
- CRO-025 — MITRE ATLAS MappingDOCX · 47 KB
- CRO-025 — MITRE ATLAS MappingMD · 16 KB
- CRO-025 — MITRE ATLAS — Publication PackageZIP · 125 KB
- CRO-025 — MITRE ATLAS Website SummaryDOCX · 37 KB
- CRO-026 — MITRE ATT&CK MappingDOCX · 46 KB
- CRO-026 — MITRE ATT&CK MappingMD · 15 KB
- CRO-026 — MITRE ATT&CK — Publication PackageZIP · 125 KB
- CRO-026 — MITRE ATT&CK Website SummaryDOCX · 37 KB
- CRO-027 — Eu AI Act MappingDOCX · 50 KB
- CRO-027 — Eu AI Act MappingMD · 135 KB
- CRO-027 — Eu AI Act — Publication PackageZIP · 174 KB
- CRO-027 — Eu AI Act Website SummaryDOCX · 36 KB
- CRO-028 — DORA MappingDOCX · 50 KB
- CRO-028 — DORA MappingMD · 132 KB
- CRO-028 — DORA — Publication PackageZIP · 174 KB
- CRO-028 — DORA Website SummaryDOCX · 36 KB
- CRO-029 — NIS2 MappingDOCX · 45 KB
- CRO-029 — NIS2 MappingMD · 30 KB
- CRO-029 — NIS2 — Publication PackageZIP · 117 KB
- CRO-029 — NIS2 Website SummaryDOCX · 36 KB
- CRO-030 — GDPR MappingDOCX · 45 KB
- CRO-030 — GDPR MappingMD · 5 KB
- CRO-030 — GDPR — Publication PackageZIP · 148 KB
- CRO-030 — GDPR Website SummaryDOCX · 36 KB
- CRO-031 — SOC 2 MappingDOCX · 46 KB
- CRO-031 — SOC 2 MappingMD · 7 KB
- CRO-031 — SOC 2 — Publication PackageZIP · 153 KB
- CRO-031 — SOC 2 Website SummaryDOCX · 36 KB
- CRO-032 — PCI DSS MappingDOCX · 44 KB
- CRO-032 — PCI DSS MappingMD · 3 KB
- CRO-032 — PCI DSS — Publication PackageZIP · 139 KB
- CRO-032 — PCI DSS Website SummaryDOCX · 36 KB
- CRO-033 — CIS Controls MappingDOCX · 43 KB
- CRO-033 — CIS Controls MappingMD · 2 KB
- CRO-033 — CIS Controls — Publication PackageZIP · 141 KB
- CRO-033 — CIS Controls Website SummaryDOCX · 36 KB
- CRO-034 — CSA CCM MappingDOCX · 51 KB
- CRO-034 — CSA CCM MappingMD · 25 KB
- CRO-034 — CSA CCM — Publication PackageZIP · 139 KB
- CRO-034 — CSA CCM Website SummaryDOCX · 37 KB
- CRO-035 — HIPAA MappingDOCX · 43 KB
- CRO-035 — HIPAA MappingMD · 4 KB
- CRO-035 — HIPAA — Publication PackageZIP · 115 KB
- CRO-035 — HIPAA Website SummaryDOCX · 36 KB
- CRO-036 — FedRAMP MappingDOCX · 49 KB
- CRO-036 — FedRAMP MappingMD · 29 KB
- CRO-036 — FedRAMP — Publication PackageZIP · 139 KB
- CRO-036 — FedRAMP Website SummaryDOCX · 38 KB
- CRO-019 — ISO IEC 42001 MappingDOCX · 51 KB
- CRO-019 — Verified Publication PackageZIP · 92 KB
- CRO-020 — ISO IEC 27001 MappingDOCX · 50 KB
- CRO-020 — Verified Publication PackageZIP · 92 KB
- CRO-021 — Executive BriefDOCX · 40 KB
- CRO-021 — ISO IEC 23894 MappingDOCX · 63 KB
- CRO-021 — Source Bounded Publication PackageZIP · 168 KB
- GAISSF CRO 022ZIP · 240 KB
- GAISSF CRO 023ZIP · 160 KB
- GAISSF CRO 024ZIP · 113 KB
Sector guidance
- SEC-037 — Healthcare Sector Implementation GuideDOCX · 65 KB
- SEC-037 — Healthcare Sector Implementation GuideMD · 71 KB
- SEC-037 — Healthcare Sector Implementation GuidePDF · 502 KB
- SEC-037 — Healthcare Sector Implementation Guide — Publication PackageZIP · 345 KB
- SEC-038 — Financial Services Guide — Publication PackageZIP · 520 KB
- SEC-038 — Financial Services Sector Implementation GuideDOCX · 130 KB
- SEC-038 — Financial Services Sector Implementation GuideMD · 41 KB
- SEC-038 — Financial Services Sector Implementation GuidePDF · 515 KB
- SEC-038 — Website SummaryDOCX · 37 KB
- SEC-039 — Insurance Sector Implementation GuideDOCX · 72 KB
- SEC-039 — Insurance Sector Implementation GuideMD · 29 KB
- SEC-039 — Insurance Sector Implementation GuidePDF · 1099 KB
- SEC-039 — Insurance Guide — Publication PackageZIP · 467 KB
- SEC-040 — Defence Sector Executive BriefDOCX · 39 KB
- SEC-040 — Defence Sector Executive BriefPDF · 79 KB
- SEC-040 — Defence Sector Implementation GuideDOCX · 74 KB
- SEC-040 — Defence Sector Implementation GuideMD · 135 KB
- SEC-040 — Defence Sector Implementation GuidePDF · 932 KB
- SEC-040 — Defence Sector Implementation Guide — Publication PackageZIP · 624 KB
- SEC-040 — Website SummaryDOCX · 37 KB
- SEC-041 — Government Sector Guidance June — Publication PackageZIP · 260 KB
- SEC-042 — Critical Infrastructure — Publication PackageZIP · 436 KB
- SEC-042 — Critical Infrastructure Sector Implementation GuideDOCX · 55 KB
- SEC-042 — Critical Infrastructure Sector Implementation GuidePDF · 739 KB
- SEC-043 — Education Sector Implementation — Publication PackageZIP · 175 KB
- SEC-043 — Education Sector Implementation GuideDOCX · 57 KB
- SEC-044 — Energy Sector Executive BriefDOCX · 37 KB
- SEC-044 — Energy Sector Executive BriefPDF · 72 KB
- SEC-044 — Energy Sector Implementation GuideDOCX · 63 KB
- SEC-044 — Energy Sector Implementation GuidePDF · 1714 KB
- SEC-044 — Energy Sector — Publication PackageZIP · 690 KB
- SEC-045 — Manufacturing Sector Implementation GuideDOCX · 62 KB
- SEC-045 — Manufacturing AI Assurance Executive BriefDOCX · 41 KB
- SEC-045 — Manufacturing Guide — Publication PackageZIP · 185 KB
- SEC-046 — Retail Executive BriefDOCX · 39 KB
- SEC-046 — Retail Executive BriefPDF · 64 KB
- SEC-046 — Retail Sector Implementation GuideDOCX · 76 KB
- SEC-046 — Retail Sector Implementation GuideHTML · 31 KB
- SEC-046 — Retail Sector Implementation GuideMD · 61 KB
- SEC-046 — Retail Sector Implementation GuidePDF · 1852 KB
- SEC-046 — Retail Guide — Publication PackageZIP · 729 KB
- SEC-047 — Telecommunications — Publication PackageZIP · 459 KB
- SEC-047 — Telecommunications Sector Implementation GuideDOCX · 58 KB
- SEC-047 — Telecommunications Sector Implementation GuidePDF · 952 KB
- SEC-048 — Legal Sector Implementation GuideDOCX · 53 KB
- SEC-048 — Legal Sector Implementation GuideHTML · 4 KB
- SEC-048 — Legal Sector Implementation GuideMD · 104 KB
- SEC-048 — Legal Sector Implementation GuidePDF · 411 KB
- SEC-048 — Legal Sector Implementation — Publication PackageZIP · 439 KB
- SEC-049 — Pharmaceutical Sector Implementation GuideDOCX · 58 KB
- SEC-049 — Pharmaceutical Sector Implementation GuideMD · 233 KB
- SEC-049 — Pharmaceutical Sector Implementation GuidePDF · 1253 KB
- SEC-049 — Pharmaceutical Sector Implementation — Publication PackageZIP · 641 KB
- SEC-049A — Pharmaceutical Executive PrimerDOCX · 25 KB
- SEC-049A — Pharmaceutical Executive PrimerMD · 3 KB
- SEC-049A — Pharmaceutical Executive PrimerPDF · 49 KB
- SEC-050 — Aerospace Executive BriefDOCX · 37 KB
- SEC-050 — Aerospace Executive BriefPDF · 46 KB
- SEC-050 — Aerospace — Publication PackageZIP · 825 KB
- SEC-050 — Aerospace Sector Implementation GuideDOCX · 75 KB
- SEC-050 — Aerospace Sector Implementation GuidePDF · 1674 KB
- SEC-051 — Automotive — Publication PackageZIP · 672 KB
- SEC-051 — Automotive Executive BriefDOCX · 39 KB
- SEC-051 — Automotive Executive BriefHTML · 5 KB
- SEC-051 — Automotive Executive BriefMD · 3 KB
- SEC-051 — Automotive Executive BriefPDF · 72 KB
- SEC-051 — Automotive Sector Implementation GuideDOCX · 55 KB
- SEC-051 — Automotive Sector Implementation GuideHTML · 225 KB
- SEC-051 — Automotive Sector Implementation GuideMD · 198 KB
- SEC-051 — Automotive Sector Implementation GuidePDF · 683 KB
Research reports and Insights
- ODA3-2026-07-INS-074 — AI Investigation ReadinessHTML · Research Report · July 22, 2026
- ODA3-2026-07-INS-074 — AI Investigation ReadinessPDF · 712 KB
- ODA3-2026-07-INS-074 — AI Investigation ReadinessDOCX · 83 KB
- ODA3-2026-07-INS-074 — SHA-256 checksumsTXT · 3 KB
Practitioner cheat sheets
Approved public practitioner resources. Each PDF is also attached to its corresponding HTML Insight.
- CHT SEC 004 AI Risk vs Security Risk MatrixPDF · 260 KB
- CHT SEC 005 AI Security Architecture PatternsPDF · 245 KB
- CHT SEC 006 AI Security Assurance FrameworkPDF · 274 KB
- CHT SEC 007 AI Security Control Validation GuidePDF · 169 KB
- CHT SEC 008 AI Security Design PrinciplesPDF · 150 KB
- CHT SEC 009 AI Security Evidence Collection GuidePDF · 208 KB
- CHT SEC 010 AI Security Governance ModelPDF · 748 KB
- CHT SEC 011 AI Security Incident Response PlaybookPDF · 744 KB
- CHT SEC 012 Vector Database Security ChecklistPDF · 601 KB
- CHT SEC 013 RAG SecurityPDF · 614 KB
- ODA3 2026 07 CHT SEC 001PDF · 438 KB
- ODA3 2026 07 CHT SEC 002PDF · 352 KB
- ODA3 2026 07 CHT SEC 003PDF · 305 KB
Other
- GAISSF Government Sector Executive Brief June 2026DOCX · 38 KB
- GAISSF Government Sector Implementation Guidance June 2026DOCX · 74 KB
- READMEMD · 3 KB
Download integrity and authority
Prefer approved packages, preserve manifests, checksums and source-bounded limitations.
Confirm ID, version, publication state, GEL terms and open gates before external reliance.
UAIF public downloads
AI-IRF approved public downloads
These files come exclusively from the approved public-safe release. The Controlled Technical Report and restricted programme artifacts are excluded.
PUBLICAI IRF EXB v1 0 GEL CompliantDOCX↓PUBLICODA3-2026-06-BCH-COM-032 Pathways-to-RecognitionPAGES↓PUBLICODA3-2026-06-EXB-COM-029 Scheme-Overview-DeckKEY↓PUBLICODA3-2026-06-EXB-HAI-002 AI-IRF-Executive-BriefDOCX↓PUBLICODA3-2026-06-FAQ-COM-030 FAQ-DocumentDOCX↓PUBLICODA3-2026-06-MTH-COM-014 Certification-Mark-Usage-GuidelinesDOCX↓PUBLICODA3-2026-06-RPT-SCS-024 Sector-Note-Financial-ServicesDOCX↓PUBLICODA3-2026-06-RPT-SCS-025 Sector-Note-HealthcareDOCX↓PUBLICODA3-2026-06-RPT-SCS-026 Sector-Note-Critical-InfrastructureDOCX↓PUBLICODA3-2026-06-TCR-HAI-003 AIIS-Implementation-SchemaDOCX↓PUBLICaiis-conformance-profiles-v1.0JSON↓PUBLICaiis-control-records-v1.0JSON↓PUBLICaiis-playbook-definitions-v1.0JSON↓PUBLICaiis-severity-classifications-v1.0JSON↓PUBLICaiis-v1.0.schemaJSON↓HAI‑004: EU AI Act operational readiness
From EU AI Act Obligations to Operational Evidence →
Supporting resources: operational crosswalk (XLSX) · 30/60/90 pathway (PDF).
GAISSF Ecosystem launch publications
ODA3-2026-07-INS-076 — ODA3 Institute Publishes GAISSF Ecosystem for Operational AI Security Assurance · Public documentation milestone · July 22, 2026
ODA3-2026-07-INS-075 — Why ODA3 Institute Published the GAISSF Ecosystem · ODA3 Insights / Founder Note.
Related framework documentation: GAISSF™ · UAIF™ · AI-IRF™ · GEL v1.0.
Practitioner Adoption Guides
Canonical collection: ODA3 Practitioner Adoption Guides. These records are practitioner guidance, not Research & Analysis publications.
ODA3-2026-08-WHP-COM-002 — ODA3 Institute in 15 Minutes · Practitioner Adoption Guide · GAISSF Ecosystem · Download COM-002 PDF
ODA3-2026-08-WHP-COM-001 — The 10-Minute Introduction to GAISSF™ · Practitioner Adoption Guide · GAISSF · Download COM-001 PDF
ODA3-2026-08-WHP-COM-007 — Which GAISSF Ecosystem Framework Do I Need? · Practitioner Adoption Guide · GAISSF Ecosystem · Download COM-007 PDF
ODA3-2026-08-WHP-COM-008 — The AI Assurance Imperative — A Board Member’s Guide to GAISSF™ · Practitioner Adoption Guide · GAISSF · Download COM-008 PDF
ODA3-2026-08-WHP-COM-003 — GAISSF™ Appendix P.1 SMB Quick-Start · Practitioner Adoption Guide · GAISSF · Download COM-003 PDF
ODA3-2026-08-WHP-COM-009 — The First 30 Days with GAISSF™ · Practitioner Adoption Guide · GAISSF · Download COM-009 PDF
ODA3-2026-08-WHP-COM-010 — Applying GAISSF™: Worked Scenarios · Practitioner Adoption Guide · GAISSF Ecosystem · Download COM-010 PDF
ODA3-2026-08-WHP-COM-004 — Mapping GAISSF™ to NIST AI RMF · Practitioner Adoption Guide · GAISSF / NIST AI RMF · Download COM-004 PDF
ODA3-2026-08-WHP-COM-005 — Mapping GAISSF™ to ISO/IEC 42001 · Practitioner Adoption Guide · GAISSF / ISO/IEC 42001 · Download COM-005 PDF
ODA3-2026-08-WHP-COM-006 — Mapping GAISSF™ to SOC 2 · Practitioner Adoption Guide · GAISSF / SOC 2 · Download COM-006 PDF
ODA3-2026-08-WHP-COM-011 — When AI Breaks — The ODA3 Guide to AI Incident Response · Practitioner Adoption Guide · UAIF / AI-IRF · Download COM-011 PDF
ODA3-2026-08-WHP-COM-012 — Classifying AI Incidents — A Practical Guide to UAIF™ · Practitioner Adoption Guide · UAIF · Download COM-012 PDF
ODA3-2026-08-WHP-COM-013 — AI Incident Response Field Guide — Using UAIF™ and AI-IRF™ for Real-World AI Incidents · Practitioner Adoption Guide · UAIF / AI-IRF · 12 August 2026; reconciled 14 August 2026 · Download COM-013 PDF
ODA3-2026-08-WHP-COM-014 — Securing Physical AI — A Practitioner’s Guide to PAI-SF™ · Practitioner Adoption Guide · PAI-SF · 12 August 2026 · Download COM-014 PDF
ODA3-2026-08-WHP-COM-015 — Building an AI Assurance Evidence Pack — A Practitioner’s Field Guide to Defensible Evidence Preparation · Practitioner Adoption Guide · GAISSF Ecosystem · 13 August 2026 · Download COM-015 PDF
ODA3-2026-08-WHP-COM-018 — The CISO’s Guide to AI Security Assurance — A Decision Guide to Controls, Evidence, Incident Readiness and Executive Accountability · Executive / Practitioner Decision Guide · GAISSF Ecosystem / Operational AI Assurance · CORRECTED FINAL (R10) · 19 August 2026 · Download COM-018 PDF
ODA3-2026-08-WHP-COM-019 — The AI System Owner’s Guide to Operational Assurance — A Practitioner’s Guide to Accountability, Evidence, Change and Operational Decisions for AI Systems · Practitioner Adoption Guide · GAISSF Ecosystem / Operational AI Assurance · CORRECTED FINAL (R10) · 14 August 2026; corrected 20 August 2026 · Download COM-019 PDF
ODA3-2026-08-WHP-COM-020 — How to Assess an AI System — Examination Perspective · Practitioner Adoption Guide · Final Version 1.0 · August 2026 · Download COM-020 PDF
ODA3-2026-08-WHP-COM-017 — Implementing GAISSF™ — A Practitioner’s Guide to Operationalizing GAISSF Controls · Practitioner Adoption Guide · GAISSF Ecosystem · CORRECTED FINAL R10 · 13 August 2026; corrected 18 August 2026 · Download COM-017 PDF
· Practitioner Adoption Guide · GAISSF Ecosystem · 13 August 2026 ·